|
Plagegeister aller Art und deren Bekämpfung: W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weissWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
05.01.2015, 19:37 | #16 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Hallo schrauber, Ich möchte nur kurz mitteilen, dass ich vor dem nächsten Wochenende nicht dazu komme deine weiteren Schritte anzuwenden. Ich schaffe es wegen der Arbeit einfach nicht. Meine Kiste bleibt die ganze Woche aus. Nur als Info, damit nicht denkst du hättest deine Arbeit umsonst gemacht. Am WE mache ich dann weiter. Danke nochmals für deine Mühe. Gruss |
06.01.2015, 00:39 | #17 |
/// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss ok
__________________
__________________ |
10.01.2015, 00:41 | #18 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Hallo schrauber,
__________________ich bin nun endlich dazu gekommen. Hier die Log Files (Teil 1): ESET Log: ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=d9deb4fe2da45541b43c96087b113826 # engine=21890 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-01-09 10:12:52 # local_time=2015-01-09 11:12:52 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Kaspersky Total Security' # compatibility_mode=1298 16777213 100 100 24333 48413202 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 4076776 172471422 0 0 # scanned=780749 # found=1 # cleaned=0 # scan_time=18706 sh=595B7A2A14B92A4766DB0A5639C84D18EC2CF4A2 ft=1 fh=009285c85ff70bd6 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="G:\Downloads\Universal Audio\UAD-Win-v550.exe" SecurityCheck: Results of screen317's Security Check version 0.99.93 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Kaspersky Total Security Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` JavaFX 2.1.1 Java 7 Update 71 Adobe Flash Player 10 Flash Player out of Date! Adobe Flash Player 16.0.0.235 Adobe Reader XI Mozilla Firefox (for.) ````````Process Check: objlist.exe by Laurent```````` Kaspersky Lab Kaspersky Total Security 15.0.1 avp.exe Kaspersky Lab Kaspersky Total Security 15.0.1 avpui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Hier Teil 2: FRST Log: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015 Ran by xxxxx (administrator) on xxxxx-PC on 10-01-2015 00:03:13 Running from C:\Users\xxxxx\Desktop Loaded Profile: xxxxx (Available profiles: xxxxx) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Windows\SysWOW64\XSrvSetup.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-05-16] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393616 2011-03-30] (KORG Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] () HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation) HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKU\S-1-5-21-25170337-1842596019-2157349911-1000\...\RunOnce: [Adobe Speed Launcher] => 1420820978 ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\shellex.dll (Kaspersky Lab ZAO) ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\shellex.dll (Kaspersky Lab ZAO) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-25170337-1842596019-2157349911-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897 HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Start Page = News - Service - Shopping bei t-online.de StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {1B293868-8F4D-4b37-89CA-75BBD8747680} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {90DC3FD6-1CAD-415a-8ED1-67062890BB03} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms} BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\fu0cgvgf.default FF DefaultSearchUrl: hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF SelectedSearchEngine: Google FF Homepage: hxxp://t-online.de/ FF NetworkProxy: "type", 4 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @ilok.com/iLokHelper,version=3.1.0.7 -> C:\Program Files (x86)\PACE Anti-Piracy\iLok\NPPaceILok.dll ( PACE Anti-Piracy, Inc) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com () FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com () FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com () FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll () FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll () FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2015-01-03] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2015-01-03] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010-02-06] FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com FF Extension: Безпечні платежі - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com [2015-01-03] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [1155072 2008-12-16] (MAGIX AG) [File not signed] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed] S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation) R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] () R2 LanmanWorkstation; C:\Windows\System32\aptwj1dm3.dll [289280 2012-04-21] (Works Ltd.) [File not signed] R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed] R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [5018624 2010-03-25] (Native Instruments GmbH) [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) S3 PSEXESVC; C:\Windows\PSEXESVC.exe [189792 2015-01-03] (Sysinternals) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] S3 UPnPService; C:\Program Files (x86)\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG) [File not signed] S2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe -s [X] S2 TryAndDecideService; "C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] () R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch) S2 cvintdrv; C:\Windows\SysWow64\Drivers\cvintdrv.sys [7140 2003-07-29] () [File not signed] S3 Fw1082; C:\Windows\System32\Drivers\Fw1082x64.sys [228864 2010-03-03] (TASCAM) S3 Fw1082WdmService; C:\Windows\System32\Drivers\FW1082Wdmx64.sys [70144 2010-03-16] (TASCAM) S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-01-04] () R3 hypaudio; C:\Windows\System32\DRIVERS\hypaudio64.sys [1484800 2010-11-30] (Universal Audio, Inc.) R3 hypkern; C:\Windows\System32\drivers\hypkern64.sys [225792 2010-11-30] () R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-04-11] () R3 iLokDrvr; C:\Windows\SysWOW64\DRIVERS\iLokDrvr.sys [54328 2009-12-02] (PACE Anti-Piracy, Inc.) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-01-03] (Kaspersky Lab ZAO) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [818888 2015-01-03] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-01-03] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO) R3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [33656 2011-03-30] (KORG INC.) S3 MADFUFTU; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra_DFU.sys [45832 2009-09-25] (M-Audio) S3 MAUSBFASTTRACKULTRA; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra.sys [180496 2013-06-18] (M-Audio) R3 mlkumidi; C:\Windows\System32\drivers\mlkumidi.sys [55856 2014-08-30] (MusicLab, Inc.) R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [111696 2012-01-21] () R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 paeusbaudio; C:\Windows\System32\DRIVERS\paeusbaudio_x64.sys [252280 2012-05-24] () S3 paeusbaudiodsp; C:\Windows\System32\DRIVERS\paeusbaudiodsp_x64.sys [71544 2012-05-24] () S3 paeusbaudioks; C:\Windows\System32\DRIVERS\paeusbaudioks_x64.sys [53112 2012-05-24] () S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] () S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [25504 2013-10-21] (Resplendence Software Projects Sp.) S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [142120 2007-04-27] (SafeNet, Inc.) R3 SynUSB64; C:\Windows\System32\DRIVERS\SynUSB64.sys [30352 2009-06-26] (Steinberg Media Technologies GmbH) R0 Tpkd; C:\Windows\SysWow64\Drivers\Tpkd.sys [86528 2008-07-02] (PACE Anti-Piracy, Inc.) [File not signed] R3 UAD2System; C:\Windows\System32\DRIVERS\UAD2System.sys [58368 2010-11-30] (Universal Audio Inc.) R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51016 2011-11-01] (Yamaha Corporation) R3 ysusb64; C:\Windows\System32\drivers\ysusb64.sys [132200 2013-12-17] (Yamaha Corporation) S3 BEHRINGER_2902; System32\Drivers\BUSB2902.sys [X] S3 BUSB_AUDIO_WDM; system32\drivers\busbwdm.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 cpuz134; \??\C:\Program Files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys [X] S3 GMSIPCI; \??\H:\INSTALL\GMSIPCI.SYS [X] S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [X] S3 TASCAM_US1800; System32\Drivers\tus1800u.sys [X] S3 TASCAM_US1800_MIDI; system32\drivers\tus1800m.sys [X] S3 TASCAM_US1800_WDM; system32\drivers\tus1800a.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-10 00:03 - 2015-01-10 00:03 - 00022792 _____ () C:\Users\xxxxx\Desktop\FRST.txt 2015-01-10 00:03 - 2015-01-10 00:03 - 00000000 ____D () C:\Users\xxxxx\Desktop\FRST-OlderVersion 2015-01-10 00:02 - 2015-01-10 00:02 - 00000890 _____ () C:\Users\xxxxx\Desktop\Security Check.txt 2015-01-09 23:58 - 2015-01-09 23:58 - 00852505 _____ () C:\Users\xxxxx\Desktop\SecurityCheck.exe 2015-01-04 16:48 - 2015-01-04 16:48 - 00001070 _____ () C:\Users\Public\Desktop\Service Center.lnk 2015-01-04 16:48 - 2015-01-04 16:48 - 00000000 __HDC () C:\ProgramData\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B} 2015-01-04 16:48 - 2015-01-04 16:48 - 00000000 __HDC () C:\ProgramData\{36047B27-9342-4F25-AB0D-F0DFC71A650A} 2015-01-04 15:56 - 2015-01-10 00:03 - 02124288 _____ (Farbar) C:\Users\xxxxx\Desktop\FRST64.exe 2015-01-04 15:42 - 2015-01-04 15:42 - 00000000 ____D () C:\Windows\ERUNT 2015-01-04 15:28 - 2015-01-04 15:29 - 01707939 _____ (Thisisu) C:\Users\xxxxx\Desktop\JRT.exe 2015-01-04 15:07 - 2015-01-04 15:20 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-04 14:23 - 2015-01-04 14:23 - 00000000 ____D () C:\Users\Public\Documents\NI Resources 2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD 2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD 2015-01-04 13:48 - 2006-05-11 12:30 - 00393216 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_IRC_1_0_3.dll 2015-01-04 13:48 - 2006-05-11 12:30 - 00061440 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_DFD_1_4.dll 2015-01-04 13:39 - 2015-01-04 13:39 - 00309448 _____ () C:\Windows\Minidump\010415-49499-01.dmp 2015-01-04 13:36 - 2015-01-04 13:38 - 730927694 _____ () C:\Windows\MEMORY.DMP 2015-01-04 13:34 - 2014-07-02 18:44 - 00609240 _____ () C:\Windows\SysWOW64\nvStreaming.exe 2015-01-04 13:32 - 2014-07-02 21:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-01-04 13:32 - 2014-07-02 21:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-01-04 13:30 - 2015-01-04 13:30 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-01-04 13:30 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-01-04 13:30 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-01-04 13:30 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-01-04 13:26 - 2015-01-04 13:29 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\xxxxx\Downloads\mbam-setup-2.0.4.1028.exe 2015-01-04 12:52 - 2015-01-04 12:52 - 00029411 _____ () C:\ComboFix.txt 2015-01-04 12:27 - 2015-01-04 12:52 - 00000000 ____D () C:\Qoobox 2015-01-04 12:27 - 2015-01-04 12:49 - 00000000 ____D () C:\Windows\erdnt 2015-01-04 12:27 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2015-01-04 12:27 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2015-01-04 12:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2015-01-04 12:22 - 2015-01-04 12:22 - 05609858 ____R (Swearware) C:\Users\xxxxx\Desktop\ComboFix.exe 2015-01-04 12:12 - 2015-01-04 12:12 - 00002394 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-03 22:28 - 2015-01-03 22:28 - 00002314 _____ () C:\Users\xxxxx\Desktop\Sicherer Zahlungsverkehr.lnk 2015-01-03 22:24 - 2015-01-03 22:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security 2015-01-03 22:24 - 2015-01-03 22:23 - 00002064 _____ () C:\Users\Public\Desktop\Kaspersky Total Security.lnk 2015-01-03 22:23 - 2015-01-03 22:23 - 00000000 ___SD () C:\Users\xxxxx\Documents\Passwords Database 2015-01-03 22:23 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2015-01-03 22:22 - 2015-01-03 22:22 - 00000000 ____D () C:\Windows\ELAMBKUP 2015-01-03 22:21 - 2015-01-03 22:49 - 00818888 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2015-01-03 22:21 - 2015-01-03 22:49 - 00150536 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2015-01-03 22:21 - 2014-08-12 18:33 - 00246456 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys 2015-01-03 22:17 - 2015-01-03 22:17 - 00000000 __HDC () C:\ProgramData\{B18B6B47-547B-4884-B977-E30BBCB3C043} 2015-01-03 22:16 - 2015-01-03 22:16 - 00000000 __HDC () C:\ProgramData\{0FBC18ED-38E5-47CD-909E-26B2242C6C2D} 2015-01-03 22:15 - 2015-01-03 22:15 - 00000000 __HDC () C:\ProgramData\{074595B0-0A1C-4DFF-AA89-993E1954016E} 2015-01-03 22:14 - 2015-01-03 22:14 - 00000888 _____ () C:\Users\Public\Desktop\Kontakt 5.lnk 2015-01-03 22:14 - 2015-01-03 22:14 - 00000000 __HDC () C:\ProgramData\{2E9C94ED-C152-4D5D-8E21-AAE23373844C} 2015-01-03 19:50 - 2015-01-03 19:50 - 00001846 _____ () C:\Users\Public\Desktop\EZkeys-64.lnk 2015-01-03 17:50 - 2015-01-03 17:54 - 34200128 _____ (Steinberg Media Technologies GmbH) C:\Users\xxxxx\Downloads\eLicenserControlSetup(2).exe 2015-01-03 17:47 - 2015-01-03 17:47 - 00000909 _____ () C:\Users\Public\Desktop\WaveLab 8 (64).lnk 2015-01-03 17:47 - 2015-01-03 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaveLab 8 (64) 2015-01-03 17:47 - 2012-08-10 06:26 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2015-01-03 17:09 - 2015-01-03 17:09 - 00189792 _____ (Sysinternals) C:\Windows\PSEXESVC.exe 2015-01-03 16:48 - 2014-12-24 06:23 - 00000000 ____D () C:\Users\xxxxx\Downloads\LicenseSupportInstallerWin64_v2.4.5_r27678 2015-01-03 16:41 - 2015-01-03 16:52 - 00000530 _____ () C:\Windows\DtcInstall.log 2015-01-03 16:21 - 2015-01-03 16:51 - 00002028 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk 2015-01-03 16:21 - 2015-01-03 16:51 - 00002016 _____ () C:\Users\Public\Desktop\iLok License Manager.lnk 2015-01-03 16:20 - 2015-01-03 16:51 - 00000000 ____D () C:\Program Files (x86)\iLok License Manager 2015-01-03 14:37 - 2015-01-10 00:03 - 00000000 ____D () C:\FRST 2015-01-03 14:13 - 2015-01-03 14:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-03 13:30 - 2015-01-03 13:31 - 02173952 _____ () C:\Users\xxxxx\Desktop\adwcleaner_4.106.exe 2015-01-03 12:55 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-01-03 12:55 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-13 11:43 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-13 11:43 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-13 11:40 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-13 11:40 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-13 11:40 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-13 11:40 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-13 11:40 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-13 11:40 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-13 11:40 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-13 11:40 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-13 11:40 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-13 11:40 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-13 11:40 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-13 11:40 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-13 11:40 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-13 11:40 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-13 11:40 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-13 11:40 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-13 11:40 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-13 11:40 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-13 11:40 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-13 11:40 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-13 11:40 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-13 11:40 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-13 11:40 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-13 11:40 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-13 11:40 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-13 11:40 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-13 11:40 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-13 11:40 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-13 11:40 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-13 11:40 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-13 11:40 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-13 11:40 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-13 11:40 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-13 11:40 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-13 11:40 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-13 11:40 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-13 11:40 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-13 11:40 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-13 11:40 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-13 11:40 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-13 11:40 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-13 11:40 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-13 11:40 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-13 11:40 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-13 11:40 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-13 11:40 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-13 11:40 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-13 11:40 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-13 11:40 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-13 11:40 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-13 11:40 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-13 11:40 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-13 11:40 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-13 11:40 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-13 11:36 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-13 11:36 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-13 11:34 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-13 11:34 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-13 11:34 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-13 11:34 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-13 11:34 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-13 11:34 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-13 11:34 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-13 11:34 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-13 11:34 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-13 11:34 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-13 11:34 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-09 17:35 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-09 17:35 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-09 17:32 - 2013-07-12 12:41 - 02061975 _____ () C:\Windows\WindowsUpdate.log 2015-01-09 17:30 - 2012-02-12 14:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2015-01-09 17:28 - 2013-07-12 12:37 - 00078737 _____ () C:\Windows\setupact.log 2015-01-09 17:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-09 17:26 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-09 17:26 - 2012-09-17 13:14 - 00078550 _____ () C:\Windows\mlkumidi.log 2015-01-04 17:17 - 2010-01-27 16:29 - 00383468 _____ () C:\Windows\PFRO.log 2015-01-04 17:16 - 2014-11-23 10:11 - 00000000 ____D () C:\AdwCleaner 2015-01-04 17:04 - 2010-01-31 13:12 - 00000000 ____D () C:\temp 2015-01-04 17:03 - 2013-12-07 13:16 - 00001995 _____ () C:\Users\Public\Desktop\Cubase 7.5 64bit.lnk 2015-01-04 16:52 - 2010-01-31 13:37 - 00000000 ____D () C:\Users\xxxxx\Documents\Native Instruments 2015-01-04 16:48 - 2011-08-05 15:00 - 00000000 ____D () C:\Program Files (x86)\VstPlugIns 2015-01-04 16:48 - 2010-01-31 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2015-01-04 16:48 - 2010-01-31 14:33 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2015-01-04 16:39 - 2009-07-14 18:58 - 11824080 _____ () C:\Windows\system32\perfh007.dat 2015-01-04 16:39 - 2009-07-14 18:58 - 03632636 _____ () C:\Windows\system32\perfc007.dat 2015-01-04 16:39 - 2009-07-14 06:13 - 00006340 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-04 13:39 - 2010-01-30 19:36 - 00000000 ____D () C:\Windows\Minidump 2015-01-04 13:34 - 2013-08-11 13:12 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2015-01-04 13:33 - 2010-02-06 19:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-01-04 13:32 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-01-04 12:52 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2015-01-04 12:41 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2015-01-04 12:39 - 2009-07-14 03:34 - 94371840 _____ () C:\Windows\system32\config\software.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 37748736 _____ () C:\Windows\system32\config\system.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2015-01-04 12:13 - 2012-06-13 08:45 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2015-01-04 12:13 - 2012-06-12 18:24 - 00030528 _____ () C:\Windows\GVTDrv64.sys 2015-01-03 22:49 - 2014-08-13 19:34 - 00077512 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwtp.sys 2015-01-03 22:24 - 2012-09-01 13:17 - 00000000 ____D () C:\Users\xxxxx 2015-01-03 22:24 - 2012-02-12 14:02 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2015-01-03 19:51 - 2011-04-22 15:06 - 00000000 ____D () C:\Users\xxxxx\Documents\Toontrack 2015-01-03 19:51 - 2011-04-22 13:48 - 00000000 ____D () C:\ProgramData\Toontrack 2015-01-03 19:50 - 2011-10-04 14:58 - 00000000 ____D () C:\Program Files\Common Files\VST3 2015-01-03 19:50 - 2010-02-14 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Toontrack 2015-01-03 19:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-01-03 17:56 - 2010-01-30 18:34 - 00000049 _____ () C:\Windows\SysWOW64\SYNSOPOS.exe.cfg 2015-01-03 17:56 - 2010-01-30 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser 2015-01-03 17:56 - 2010-01-25 17:07 - 00554074 _____ () C:\Windows\DPINST.LOG 2015-01-03 17:47 - 2010-01-30 18:20 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Steinberg 2015-01-03 17:46 - 2012-12-08 18:07 - 00000000 ____D () C:\Program Files\Steinberg 2015-01-03 17:41 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\w3data.vss 2015-01-03 17:41 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\msvcsv60.dll 2015-01-03 17:41 - 2011-05-28 12:21 - 00000096 _____ () C:\ProgramData\autobk.inc 2015-01-03 17:41 - 2010-02-15 12:34 - 00000304 _____ () C:\Windows\msocreg32.dat 2015-01-03 17:25 - 2010-02-15 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IK Multimedia 2015-01-03 16:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-01-03 16:23 - 2012-04-27 09:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-03 16:21 - 2010-01-27 16:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-01-03 15:57 - 2014-09-25 14:02 - 00000000 ____D () C:\ProgramData\Package Cache 2015-01-03 12:58 - 2014-06-21 12:00 - 00000000 ____D () C:\Users\xxxxx\AppData\Local\Adobe 2015-01-03 12:57 - 2012-06-07 13:31 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-03 12:57 - 2011-05-20 23:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-12-13 13:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-12-13 13:31 - 2014-04-26 12:25 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-12-13 11:47 - 2013-07-14 15:54 - 00000000 ____D () C:\Windows\system32\MRT 2014-12-13 11:47 - 2010-02-05 19:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-13 11:44 - 2010-01-25 18:22 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-12-13 11:28 - 2013-04-13 10:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk Files to move or delete: ==================== C:\Users\xxxxx\SOFTUBE PLUG-INS CONTROL.EXE Some content of TEMP: ==================== C:\Users\xxxxx\AppData\Local\Temp\nvSCPAPI.dll C:\Users\xxxxx\AppData\Local\Temp\nvStInst.exe C:\Users\xxxxx\AppData\Local\Temp\Quarantine.exe C:\Users\xxxxx\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-03 19:03 ==================== End Of Log ============================ Geändert von Motif ES 6 (10.01.2015 um 00:54 Uhr) |
10.01.2015, 00:44 | #19 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Teil 3: FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015 Ran by xxxxx at 2015-01-10 00:10:45 Running from C:\Users\xxxxx\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Total Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Total Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Total Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) @BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.24 - GIGABYTE) Acronis*True*Image*Home 2012 (HKLM-x32\...\{C1FDF2F0-2136-42D8-8A64-2B45BBF2C19E}Visible) (Version: 15.0.7119 - Acronis) Acronis*True*Image*Home 2012 (x32 Version: 15.0.7119 - Acronis) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.) Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated) Adobe Flash Player 10 ActiveX (HKLM-x32\...\{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}) (Version: 10.1.52.14 - Adobe Systems, Inc.) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) AmpegSVX (HKLM-x32\...\{CF1D7323-8A0A-49C7-83B0-088DB90721E2}) (Version: 1.1.3 - IK Multimedia) AmpliTube 3 (HKLM-x32\...\{5DD152A8-BFB3-439E-90CD-5C00C2116E23}) (Version: 3.0.0 - IK Multimedia) AmpliTube 3 version 3.14.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.14.0 - IK Multimedia) AmpliTube Fender (HKLM-x32\...\{B178BACA-880B-4D20-85F9-522F7F2DECBE}) (Version: 1.1.0 - IK Multimedia) AmpliTube Jimi Hendrix (HKLM-x32\...\{66BA35B0-1911-47EF-B170-1DCFFDA362F1}) (Version: 1.0.3 - IK Multimedia) AmpliTube2 (HKLM-x32\...\{C95AACD4-9507-4F5C-9D53-22B1ACCFECD1}) (Version: 2.1.4 - IK Multimedia) Antares Autotune VST RTAS TDM v5.08 (HKLM-x32\...\Antares Autotune VST RTAS TDM_is1) (Version: - Team AiR 2007) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ARC System 2 version 2.2.1 (HKLM\...\{4952A610-D484-4F6A-B1B4-33797CFDB821}_is1) (Version: 2.2.1 - IK Multimedia) ArcSoft Panorama Maker 6 (HKLM-x32\...\{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}) (Version: 6.0.8.85 - ArcSoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.) AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE) AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Basic FX Suite (HKLM-x32\...\InstallShield_{45BBAD53-80DB-4DD2-9C50-B5E09EFFAEA7}) (Version: 1.0.0 - Yamaha Corporation) Basic FX Suite (Version: 1.0.0 - Yamaha Corporation) Hidden Best Service Engine 1.0.4 64bit (HKLM-x32\...\Best Service Engine 1.0.4 64bit) (Version: - ) Best Service Galaxy II (HKLM-x32\...\Best Service Galaxy II) (Version: - ) Best Service Galaxy Vintage D (HKLM-x32\...\Best Service Galaxy Vintage D) (Version: - Best Service) Best Service Galaxy Vintage D (Version: 1.0.0.001 - Best Service) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Boris Continuum Complete 7 Adobe CS5 (HKLM\...\{A31D5812-F0AA-4AFA-B584-C2C4AC141518}) (Version: 7.00.0000 - Boris FX, Inc.) Canon MP110 (HKLM\...\{B3467C74-0678-459a-9180-722763E0AFDE}) (Version: - ) Canon ScanGear Starter (HKLM-x32\...\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}) (Version: - ) CS-80V2 2.5.4 (HKLM-x32\...\CS-80V2_is1) (Version: 2.5.4 - Arturia) CSR (HKLM-x32\...\{648C1BFD-6A70-46D8-B855-F84D95C2DC34}) (Version: 1.1.1 - IK Multimedia) Custom Shop version 1.5.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.5.0 - IK Multimedia) DVD-lab PRO 2.3 (HKLM-x32\...\DVD-lab PRO 2.3_is1) (Version: - Mediachance) East West Boesendorfer 290 (HKLM-x32\...\East West Boesendorfer 290) (Version: - ) East West EWQLSO Silver Edition (HKLM-x32\...\East West EWQLSO Silver Edition) (Version: - ) East West Hardcore Bass (HKLM-x32\...\East West Hardcore Bass) (Version: - ) East West Hardcore Bass XP (HKLM-x32\...\East West Hardcore Bass XP) (Version: - ) Easy Tune 6 B12.0402.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE) Easy Tune 6 B12.0402.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Electronic EZmix pack (HKLM-x32\...\{6450F55E-EE0F-4203-A90D-D533EE3F88E4}) (Version: 1.0.0 - Toontrack) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.8.5.1159 - Steinberg Media Technologies GmbH) ELS Vocoder (HKLM-x32\...\ELS Vocoder_is1) (Version: 1.6.0 - Eiosis, Inc.) EZdrummer (HKLM-x32\...\{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}) (Version: 1.3.2 - Toontrack) EZdrummer 2 32-bit (HKLM-x32\...\{7E36EB5B-0739-4DA7-BF26-E63DD2BECA76}) (Version: 2.0.0 - Toontrack) EZdrummer 2 32-bit Update (HKLM-x32\...\{CDE1FC7E-3E9A-48BA-BBB9-65C2026CA0A2}) (Version: 2.0.1 - Toontrack) EZdrummer 2 64-bit (HKLM\...\{B9217824-0EBE-49C7-98A0-A76CC46BBB7D}) (Version: 2.0.0 - Toontrack) EZdrummer 2 64-bit Update (HKLM\...\{11CC8964-9CB0-46E6-9218-CD39ED4A554D}) (Version: 2.0.1 - Toontrack) EZDrummer 64 bit (HKLM\...\{6CEFB8E2-2B47-49AB-B97E-AA1ACF6595E5}) (Version: 1.3.0 - Toontrack) EZDrummer 64-bit (HKLM\...\{80E801DB-5288-4447-AAC2-27F329B61C6E}) (Version: 1.3.2 - Toontrack) EZkeys Classic Electrics 64 (HKLM\...\{2F547D3F-AB60-4319-8513-80DBD3896BA8}) (Version: 1.0.1 - Toontrack) EZmix 32-bit (HKLM-x32\...\{B5AB1F3A-136C-4C87-BB49-0E3ACD5B9F7C}) (Version: 2.0.9 - Toontrack) EZmix 64-bit (HKLM\...\{3D83CC9F-E2E1-47AE-B1AF-F6D3A8825196}) (Version: 2.0.9 - Toontrack) EZXAmericana (HKLM-x32\...\{7DB4839F-DFA6-49D2-907F-740CE65B2D10}) (Version: 1.0.0 - Toontrack) EZXClaustrophobic (HKLM-x32\...\{8094F7AE-CA21-4AF2-A256-BC918CE0E796}) (Version: 1.1.3 - Toontrack) EZXCocktail (HKLM-x32\...\{147567F0-8575-4BE0-B5B3-62706C67FA5A}) (Version: 1.3.0 - Toontrack) EZXFunkmasters (HKLM-x32\...\{BB5A44CB-3045-43E2-BEB0-B64E477D4633}) (Version: 1.0.0 - Toontrack) EZXJazz (HKLM-x32\...\{EED8D44F-CEBB-4298-8D0E-E01AF6AC0663}) (Version: 1.0.0 - Toontrack) EZXVintage (HKLM-x32\...\{430399DC-98BC-4A7F-8F8E-77981CABAE05}) (Version: 1.2.0 - Toontrack) FG-X Virtual Mastering Console (HKLM\...\FG-X Virtual Mastering Console_is1) (Version: - Slate Digital) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{19666E73-D9E5-44D4-8F33-037ED151ECBC}) (Version: 2.1.22.0 - MAGIX AG) Garritan Jazz Big Band (HKLM-x32\...\Garritan Jazz Big Band) (Version: - ) Garritan Personal Orchestra (HKLM-x32\...\Garritan Personal Orchestra) (Version: - ) Garritan Personal Orchestra KP2 (HKLM-x32\...\Garritan Personal Orchestra KP2) (Version: - ) Gigabyte Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0001 - GIGABYTE Technologies, Inc.) Halls Of Fame Free - Origami Edition 2.5.2 (HKLM-x32\...\Halls Of Fame Free - Origami Edition 2.5.2) (Version: - ) High-Definition Video Playback (x32 Version: 11.1.11500.4.273 - Nero AG) Hidden IK Multimedia Authorization Manager version 1.0.11 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.11 - IK Multimedia) iLok Client Helper (HKLM-x32\...\InstallShield_{DEA491FB-48BC-4B6B-8902-FCD4BAB069BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.) iLok Client Helper (x32 Version: 5.9.1 - PACE Anti-Piracy, Inc.) Hidden iLok Client Helper x32x64 (HKLM-x32\...\InstallShield_{27F0B084-8305-4891-B9FD-4F2E3EDF98D4}) (Version: 5.8.12 - PACE Anti-Piracy) iLok Client Helper x32x64 (x32 Version: 5.8.12 - PACE Anti-Piracy) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Incomedia WebSite X5 v9 - Evolution (HKLM-x32\...\{64392EEB-38EF-45FD-822D-5C75CA136860}_is1) (Version: 9.0.0.1597 - Incomedia s.r.l.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation) Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.) iZotope Nectar Elements (HKLM-x32\...\iZotope Nectar Elements_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Mirrorball Style Pack (HKLM-x32\...\iZotope Nectar Mirrorball Style Pack_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Style Pack 1 (HKLM-x32\...\iZotope Nectar Style Pack 1_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Utility Pack 1 (HKLM-x32\...\iZotope Nectar Utility Pack 1_is1) (Version: 1.00 - iZotope, Inc.) iZotope Ozone 3 (HKLM-x32\...\iZotope Ozone 3_is1) (Version: 3.05 - iZotope, Inc.) iZotope Ozone 4 (HKLM-x32\...\iZotope Ozone 4_is1) (Version: 4.03 - iZotope, Inc.) iZotope Spectron (HKLM-x32\...\iZotope Spectron_is1) (Version: 1.05 - iZotope, Inc.) iZotope Stutter Edit (HKLM-x32\...\iZotope Stutter Edit_is1) (Version: 1.04 - iZotope, Inc.) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) Jazz and Big Band KP2 (HKLM-x32\...\Jazz and Big Band KP2) (Version: - ) JBridge (HKLM-x32\...\JBridge) (Version: - JBridge) <==== ATTENTION! Jupiter-8V2 2.5.5 (HKLM-x32\...\jupiter8v25_is1) (Version: 2.5.5 - Arturia) Kaspersky Total Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) Kaspersky Total Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden K-Lite Codec Pack 6.4.5 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 6.4.5 - ) K-Lite Mega Codec Pack 8.9.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.9.5 - ) KORG padKONTROL Editor Librarian (HKLM-x32\...\{D77332DD-FA53-4E49-9F4B-3863B8D56196}) (Version: 1.01.0010 - KORG Inc.) KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{B3CB5BA3-3E98-4E85-944E-B03D055F8450}) (Version: 1.13.0601 - Korg Inc.) LatencyMon 6.00 (HKLM\...\LatencyMon_is1) (Version: - Resplendence Software Projects Sp.) LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe) Magic Bullet Looks (HKLM-x32\...\InstallShield_{595AC242-897D-494C-A278-2A2781403824}) (Version: 1.4.1 - Red Giant Software) Magic Bullet Looks (Version: 1.4.1 - Red Giant Software) Hidden Magic Bullet Mojo (HKLM-x32\...\InstallShield_{40E89076-E040-421E-AEB7-D931F8B07401}) (Version: 1.2.0 - Red Giant Software) Magic Bullet Mojo (Version: 1.2.0 - Red Giant Software) Hidden MAGIX 3D Maker (embeded) (HKLM-x32\...\MAGIX 3D Maker D) (Version: 6.0.0.3 - MAGIX AG) MAGIX Foto Manager 8 6.0.1.457 (D) (HKLM-x32\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.457 - MAGIX AG) MAGIX Foto Premium 3.1.0.11 (D) (HKLM-x32\...\MAGIX Foto Premium D) (Version: 3.1.0.11 - MAGIX AG) MAGIX Fotobuch 3.6 (HKLM-x32\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG) MAGIX MP3 Maker 15 10.0.0.257 (D) (HKLM-x32\...\MAGIX MP3 Maker 15 D) (Version: 10.0.0.257 - MAGIX AG) MAGIX Online Druck Service 3.4.3.0 (D) (HKLM-x32\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG) MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG) MAGIX Website Maker 4 1.13.0.112 (D) (HKLM-x32\...\MAGIX Website Maker 4 D) (Version: 1.13.0.112 - MAGIX AG) Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net) Melodyne 3.2 (HKLM-x32\...\{A1F143D1-1F0D-44FB-A44B-71D4367D16DE}) (Version: 3.2.0202 - Celemony Software GmbH) Melodyne 3.2 (x32 Version: 3.2.0202 - Celemony Software GmbH) Hidden Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH) Melodyne singletrack (HKLM-x32\...\{16DF894D-FC3F-4B87-908D-671E201CD7A8}) (Version: 2.01.0045 - Celemony Software GmbH) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 1.0.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version: - ) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation) Mini V 2.5.5 (HKLM-x32\...\miniv2_5_is1) (Version: 2.5.5 - Arturia) minimoog V 1.6 (HKLM-x32\...\minimoog V_is1) (Version: - Arturia) minimoog V2 2.0 (HKLM-x32\...\minimoog V2_is1) (Version: - Arturia) Miroslav Philharmonik (HKLM-x32\...\{BA0D0121-A3BA-487D-9C78-7AB0E676C722}) (Version: 1.1.2 - IK Multimedia) Modular V 2.6.3 (HKLM-x32\...\MMV_2.6.0_is1) (Version: 2.6.3 - Arturia) Moog Modular V 2.5 (HKLM-x32\...\Moog Modular V 2_is1) (Version: - Arturia) Movavi Screen Capture Studio 4 (HKLM-x32\...\Movavi Screen Capture Studio 4) (Version: 4.3.3 - MOVAVI) Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) mp3-2-wav converter 1.14 (HKLM-x32\...\mp3-2-wav) (Version: - ) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MusicLab RealGuitar (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (HKLM-x32\...\{4c7ab715-e30c-4db5-ae25-da050dd80533}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealGuitar Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (HKLM-x32\...\{a55070fb-e9c5-4a41-b693-7f439a4d02cc}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealLPC Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (HKLM-x32\...\{85520ea4-3eee-4096-89b7-6df88a92032e}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealStrat Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab Virtual Midi Driver (64-bit) (HKLM\...\{2B019162-86C7-4D14-AED0-2CB5110BA4FF}) (Version: 2.0.2.0 - MusicLab, Inc.) Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 60s Drums (HKLM-x32\...\Native Instruments Abbey Road 60s Drums) (Version: - Native Instruments) Native Instruments Abbey Road 60s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 60s Drums 1.1) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drums (HKLM-x32\...\Native Instruments Abbey Road 70s Drums) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 70s Drums 1.1) (Version: - Native Instruments) Native Instruments Abbey Road Modern Drums (HKLM-x32\...\Native Instruments Abbey Road Modern Drums) (Version: - Native Instruments) Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments) Native Instruments Battery 3 (HKLM-x32\...\Native Instruments Battery 3) (Version: - Native Instruments) Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments) Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.0.1.288 - Native Instruments) Native Instruments DrumMicA (HKLM-x32\...\Native Instruments DrumMicA) (Version: - Native Instruments) Native Instruments Elektrik Piano (HKLM-x32\...\Native Instruments Elektrik Piano) (Version: - ) Native Instruments Elektrik Piano 1.5 (HKLM-x32\...\Native Instruments Elektrik Piano 1.5) (Version: - ) Native Instruments Guitar Rig 3 (HKLM-x32\...\Native Instruments Guitar Rig 3) (Version: - Native Instruments) Native Instruments Guitar Rig 4 (HKLM-x32\...\Native Instruments Guitar Rig 4) (Version: - Native Instruments) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.4.2.245 - Native Instruments) Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.1.0.6 - Native Instruments) Native Instruments Replika (HKLM-x32\...\Native Instruments Replika) (Version: 1.2.0.699 - Native Instruments) Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments) Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: - Native Instruments) Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: - Native Instruments) Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments) Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: - Native Instruments) Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: - Native Instruments) Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: - Native Instruments) Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments) Nero 10 ClipartPack (HKLM-x32\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.6.10000.11.0 - Nero AG) Nero 10 Kwik Themes 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.6.10000.1.0 - Nero AG) Nero 10 Kwik Themes 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.6.10000.2.0 - Nero AG) Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.6.10000.0.0 - Nero AG) Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.6.10000.0.0 - Nero AG) Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.6.10000.1.0 - Nero AG) Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.6.10000.11.0 - Nero AG) Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.6.10000.11.0 - Nero AG) Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.10600.6.100 - Nero AG) Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10700.5.100 - Nero AG) Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.4.10400.2.100 - Nero AG) Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10600.4.100 - Nero AG) Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG) Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10800.6.100 - Nero AG) Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10300.1.100 - Nero AG) Nero Kwik Media (HKLM-x32\...\{1F7D9F37-C39C-486C-BDF8-8F440FFB3352}) (Version: 1.6.16600.75.100 - Nero AG) Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.11200 - Nero AG) Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.10.10700.5.100 - Nero AG) Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG) Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.10.10500.4.100 - Nero AG) Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10500.3.100 - Nero AG) Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.4.11000.9.100 - Nero AG) Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.10.10700.6.100 - Nero AG) NF VST 64-bit Installer (HKLM-x32\...\NF VST 64-bit Installer3.0) (Version: 3.0 - Nomad Factory) Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon) Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.7.0 - Nikon) NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation) NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9745 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation) ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE) PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) PACE License Support Win64 (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) Hidden PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.12 - Nikon) Plus Pack für Acronis True Image Home 2012 (HKLM-x32\...\{A8EFC6C1-DF0C-4F51-8779-EAC4CDB440A4}) (Version: 15.0.6131 - Acronis) Prophet-V2 2.5.3 (HKLM-x32\...\prophetv2_5_is1) (Version: 2.5.3 - Arturia) PSP VintageMeter 32bit (HKLM-x32\...\PSP VintageMeter 32bit) (Version: 1.0.0 32bit - PSPaudioware.com) PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6554 - Realtek Semiconductor Corp.) ReValver HPSE x64 (HKLM\...\ReValver HPSE x64_is1) (Version: - ) Roots Sticks MIDI (HKLM-x32\...\{0EEAD139-1ABB-43B9-BBA1-5ECF9C6CCF8B}) (Version: 1.0.0 - Toontrack) SampleMoog (HKLM-x32\...\{218AA20E-F016-4385-9F74-04FF8E596FB2}) (Version: 1.0.2 - IK Multimedia) SampleTank 2 (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.4 - IK Multimedia) SampleTank 3 version 3.3.0 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.3.0 - IK Multimedia) Sentinel Protection Installer 7.4.0 (HKLM-x32\...\{5A180ED5-0AC1-410A-B790-5E0319CD0A93}) (Version: 7.4.0 - SafeNet, Inc.) SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden Softube Plug-Ins (VST 32-bit) (HKLM-x32\...\Softube Plug-Ins (VST 32-bit)) (Version: - ) Softube Plug-Ins (VST 64-bit) (HKLM\...\Softube Plug-Ins (VST 64-bit)) (Version: - ) Softube Plug-Ins (VST AAX 64-bit) (HKLM\...\Softube Plug-Ins (VST AAX 64-bit)) (Version: - ) SONiVOX Vocalizer (HKLM-x32\...\SONiVOX Vocalizer_is1) (Version: - ) Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit)_is1) (Version: 1.0.0 - Sonnox Ltd, Oxford, UK) Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit)_is1) (Version: 1.0.2 - Sonnox Ltd, Oxford, UK) Spark Vintage Drum Machines 1.7.2 (HKLM-x32\...\Spark Vintage Drum Machines_is1) (Version: - Arturia) SPL TwinTube 1.3.1 (HKLM-x32\...\SPL TwinTube_is1) (Version: - SPL) SPL Vitalizer MK2-T 1.3 (HKLM-x32\...\SPL Vitalizer MK2-T_is1) (Version: - SPL) Splashtop Connect for Firefox (HKLM-x32\...\{EF25F71D-F3E8-42A3-8B5A-DBF83C4B942F}) (Version: 2.0.5.2 - Splashtop Inc.) Splashtop Connect for IE (HKLM-x32\...\{E2B086BD-75A9-45D1-A675-151624B259A1}) (Version: 2.0.5.1 - Splashtop Inc.) SSD Sampler (HKLM-x32\...\SSD4) (Version: 1.1 - Yellow Matter Entertainment) StartUpProject (HKLM-x32\...\{4ABFED1A-0DE9-4864-A89F-1117DECFF672}) (Version: 3.5.0 - Avid Technology, Inc.) Steinberg CC121 Extension 64bit (HKLM-x32\...\{1D111953-3C70-48E3-BB62-B669C724585C}) (Version: 1.7.1 - Yamaha Corporation) Steinberg Cubase 7.5 64bit (HKLM\...\{C75E8AD9-C89F-4505-5E87-CFCCEBE284FA}) (Version: 7.5.20 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH) Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.2 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.0.1 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.2 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne 64bit (HKLM\...\{743C5D75-6BC8-4881-BF7D-E7DF29F155F4}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Additional Content Set 01 (HKLM-x32\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH) Steinberg HALionOne Expression Set (HKLM-x32\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Drum Set (HKLM-x32\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Set (HKLM-x32\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Pro Set (HKLM-x32\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Drum Set (HKLM-x32\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Set (HKLM-x32\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg UR44 Applications (HKLM-x32\...\InstallShield_{37619421-E7D8-44C2-85A3-486C97E6A0D4}) (Version: 2.1.0 - Yamaha Corporation) Steinberg UR44 Applications (Version: 2.1.0 - Yamaha Corporation) Hidden Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg VST Classics 1 64bit (HKLM\...\{AA322103-FC2B-4D86-BA6C-67D4DDB4209C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg VST Classics 2 64bit (HKLM\...\{AC07B5F9-BF11-4221-9E85-87A6F33BCBB3}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Stutter Edit Expansion 1 (HKLM-x32\...\Stutter Edit Expansion 1_is1) (Version: 1.00 - iZotope, Inc.) Stutter Edit Expansion 2 (HKLM-x32\...\Stutter Edit Expansion 2_is1) (Version: 1.00 - iZotope, Inc.) Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - ) Superior Drummer 32-bit (HKLM-x32\...\{009AC76E-1A66-4682-82B7-417E77F3C648}) (Version: 2.4.0 - Toontrack) Superior Drummer 64-bit (HKLM\...\{22029AEE-38DF-4E35-AEF4-FE8CA3F6667F}) (Version: 2.4.0 - Toontrack) Toontrack solo (HKLM-x32\...\{5866520C-8857-4986-833A-039F4584C3F7}) (Version: 1.3.2 - Toontrack) Toontrack solo 64 bit (HKLM\...\{FA9D0D8C-FDD1-45C2-8291-079FBA72D2CB}) (Version: 1.3.2 - Toontrack) T-RackS 1.x (HKLM-x32\...\{37BCCAE2-A3AD-4E03-B4FD-A1BE1FE6365A}) (Version: 1.3.0 - IK Multimedia) T-RackS 3 Standard (HKLM-x32\...\{A78D0A87-8C6E-4726-84D7-C4CAC122617D}) (Version: 3.1.1 - IK Multimedia) T-RackS CS version 4.7.1 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.7.1 - IK Multimedia) UAD Powered Plug-Ins (HKLM-x32\...\UAD Powered Plug-Ins) (Version: - ) Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - ) Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.6 - Ulead Systems, Inc.) Ulead PhotoImpact 11 (HKLM-x32\...\{C8550C86-A712-4219-AD4C-038C9FD1D149}) (Version: 11.0 - Ulead System) UninstallTpkdx64 (HKLM\...\Tpkdx64_is1) (Version: - ) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Vienna Instruments 2.0 (HKLM\...\Vienna Instruments_is1) (Version: - Vienna Symphonic Library) Vienna Instruments Software 1.11 (HKLM-x32\...\Vienna Instruments Software_is1) (Version: - Vienna Symphonic Library) ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.7.6 - Nikon) Vir2 Instruments Acoustic Legends HD (HKLM-x32\...\Vir2 Instruments Acoustic Legends HD) (Version: - ) Vir2 Instruments BASiS (HKLM-x32\...\Vir2 Instruments BASiS) (Version: - ) Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}) (Version: 1.00.0000 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) VKFX 2.2.5 (HKLM\...\{C270463E-8DF0-45c7-AB1F-2695E822E344}_is1) (Version: 2.2.5 - Overloud) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) WAV to AC3 Encoder 5.0 (HKLM-x32\...\WAV to AC3 Encoder_is1) (Version: - Wieslaw Soltes) WaveLab 7 (HKLM-x32\...\WaveLabPro7) (Version: 7.2.1.600 - Steinberg) WaveLab 8 (64 bit) (HKLM\...\WaveLabPro8_64) (Version: 8.0.0.658 - Steinberg) Waves Complete V9r21 (HKLM-x32\...\{93000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.3.21 - Waves) Wavpack4Wavelab6 (HKLM-x32\...\{D2CB5A07-DF85-4CFD-8E76-EB23B77730F3}) (Version: 1.0.0 - RIL) Windows Driver Package - Universal Audio Inc. (UAD2Pcie) UAD2DSP (11/30/2010 ) (HKLM\...\D6464B370822574865708071F3E87D186FAC7BA4) (Version: 11/30/2010 - Universal Audio Inc.) Windows Driver Package - Universal Audio Inc. (UAD2System) UAD2DSP (11/30/2010 ) (HKLM\...\072DA3D1AC97714EA927A1A5770099D1AB131FD5) (Version: 11/30/2010 - Universal Audio Inc.) WinRAR 4.10 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH) Wurlitzer V 1.0.6 (HKLM-x32\...\Wurlitzer V_is1) (Version: - Arturia) XLN Online Installer (HKLM\...\XLN Online Installer Inno Setup ID_is1) (Version: - ) XLN Online Installer (HKLM\...\XLN Online Installer) (Version: - XLN Audio AB) Yamaha Steinberg USB Driver (HKLM-x32\...\InstallShield_{89A4C956-539C-438D-8D3B-B9C054FD0DDE}) (Version: 1.8.5 - Yamaha Corporation) Yamaha Steinberg USB Driver (Version: 1.8.5 - Yamaha Corporation) Hidden Yamaha USB-MIDI Driver (HKLM-x32\...\InstallShield_{18369253-E53F-4A47-818E-082DFB950872}) (Version: 3.1.2.1 - Yamaha Corporation) Yamaha USB-MIDI Driver (Version: 3.1.2.1 - Yamaha Corporation) Hidden yellow tools Independence Pro 2.5.4 Software Suite 64bit (HKLM-x32\...\yellow tools Independence Pro 2.5.4 Software Suite 64bit) (Version: - ) Zero-G Vocal Forge (HKLM-x32\...\Zero-G Vocal Forge) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{CE4DC330-BD45-4D58-89D8-213C0487778D}\InprocServer32 -> C:\Program Files\MusicLab\RealStrat 3\RealStratView.dll () CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{FEEC32C4-894D-4B59-B6ED-8AC7B1C84295}\InprocServer32 -> C:\Program Files\MusicLab\RealGuitar 3\RealGuitarView.dll () ==================== Restore Points ========================= 20-09-2014 11:44:35 Installiert Yamaha Steinberg USB Driver 20-09-2014 11:46:24 Installiert Steinberg UR44 Applications 20-09-2014 11:48:38 Installiert Basic FX Suite 20-09-2014 12:01:51 Installiert Yamaha Steinberg USB Driver 20-09-2014 12:03:24 Installiert Steinberg UR44 Applications 24-09-2014 14:58:30 Windows Update 25-09-2014 14:00:22 Installed Waves MultiRack Native and SoundGrid V9r15 02-10-2014 11:09:40 Windows Update 07-10-2014 11:39:13 Windows Update 08-10-2014 12:06:16 Removed Waves MultiRack Native and SoundGrid V9r15 08-10-2014 12:26:52 Removed Waves Complete V9r18 08-10-2014 12:28:19 Installed Waves Complete V9r21 08-10-2014 12:48:13 Installed Waves MultiRack Native and SoundGrid V9r15 08-10-2014 13:04:31 Installed Waves Complete V9r21 08-10-2014 13:16:45 Installed Waves Complete V9r21 08-10-2014 15:05:45 Installed Waves Complete V9r21 08-10-2014 15:36:30 Installed Waves Complete V9r21 08-10-2014 15:45:41 Removed Waves Complete V9r21 08-10-2014 15:48:39 Removed Waves MultiRack Native and SoundGrid V9r15 08-10-2014 15:53:19 Installed Waves Complete V9r21 08-10-2014 16:25:34 Installed Waves Complete V9r21 08-10-2014 16:56:27 Removed Waves Complete V9r21 08-10-2014 18:12:08 Installed Waves Complete V9r21 08-10-2014 18:21:06 Installed Waves Complete V9r21 08-10-2014 19:22:14 Wiederherstellungsvorgang 08-10-2014 19:35:43 Installed Waves Complete V9r21 09-10-2014 15:16:07 Configured Waves Complete V9r21 10-10-2014 12:21:46 Removed Steinberg Cubase 6 64bit 10-10-2014 13:01:03 Windows Update 14-10-2014 12:02:48 Windows Update 16-10-2014 11:31:16 Windows Update 16-10-2014 15:06:14 Windows Update 19-10-2014 13:18:39 Installed Java 7 Update 71 22-10-2014 12:22:33 Windows Update 28-10-2014 09:30:12 Windows Update 28-10-2014 13:13:20 MusicLab RealGuitar 28-10-2014 13:14:28 Gerätetreiber-Paketinstallation: MusicLab,Inc. Audio-, Video- und Gamecontroller 28-10-2014 13:16:39 MusicLab RealLPC 28-10-2014 13:18:35 MusicLab RealStrat 01-11-2014 13:48:03 Windows Update 08-11-2014 11:46:01 Windows Update 22-11-2014 13:22:50 Windows Update 06-12-2014 14:04:32 Configured PACE License Support Win64 13-12-2014 11:41:20 Windows Update 03-01-2015 12:56:20 Windows Update 03-01-2015 15:56:19 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 03-01-2015 15:56:50 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 03-01-2015 16:08:25 Configured iLok Client Helper 03-01-2015 16:10:52 Removed PACE License Support Win64 03-01-2015 16:20:09 Installed PACE License Support Win64 03-01-2015 16:50:55 Configured PACE License Support Win64 03-01-2015 17:37:32 Removed Steinberg Cubase 7 64bit 03-01-2015 19:50:15 Installed EZkeys Classic Electrics 64. 03-01-2015 22:11:46 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 03-01-2015 22:12:30 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 04-01-2015 16:45:43 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 04-01-2015 16:46:45 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2015-01-04 12:41 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1061FDDF-FD38-4434-923F-B01E4FE9EA0B} - System32\Tasks\{29175965-F787-4528-B3C8-F57146EBD8E8} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {142BD87F-4E9D-4DD7-BD37-30E762B767FB} - System32\Tasks\{85839F60-C55D-4A03-ADA4-CFBFF70913F4} => pcalua.exe -a "C:\Users\xxxxx\Downloads\Waves_Complete_V9r18.exe" -d "C:\Users\xxxxx\Downloads" Task: {19ABA4F3-17E6-4F42-AB05-A96F73B41FA8} - System32\Tasks\{BB11460A-50B3-494F-9819-514E591A0F96} => pcalua.exe -a Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe -d Q:\Downloads\Tascam\FW-1082_DR_Win_v170 Task: {19FE1324-E749-4E42-AF49-7C829D936723} - System32\Tasks\{DA2C2281-7022-46CA-9B16-D35E131E183B} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {1DD7E5BB-F8FF-4979-AB40-75A0ACE435F4} - System32\Tasks\{29DBEDF4-CF87-46A4-B759-506861DE03D9} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {1E879F1F-9418-45B8-A47C-1E96C550DA07} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {23F870EA-19D1-47A4-88EA-D94C1A6C1ECF} - System32\Tasks\{4866F09B-B790-40EA-BF5E-BECC5DA41AE1} => C:\Users\xxxxx\Downloads\Waves_Complete_V9r18.exe [2014-10-08] () Task: {24235CED-6D6E-4576-8077-0B7DE26822E1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {26AEF134-8686-4622-ACE9-13CD77C4229F} - System32\Tasks\{CD71D5AF-98B4-41C1-ABF5-E88C19526654} => pcalua.exe -a Q:\Downloads\Steinberg\WaveLabAspi.exe -d Q:\Downloads\Steinberg Task: {26B0B279-DF8C-4CFE-9069-73402524C30C} - System32\Tasks\{ADB300C0-352F-4357-89B4-6DD70CC70B1B} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {298B857C-0B65-4FF1-974A-56F1C6FA985C} - System32\Tasks\{438F3EF0-DDAA-4675-A999-E7A0FD922E27} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {29948ADB-C48B-4D26-928D-AB21C21FAFE0} - System32\Tasks\{40D901C2-504F-4FFA-B15A-16A9F99DEB99} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {29FB761E-3D1C-4660-9107-8982B85C70AE} - System32\Tasks\{412B8675-D7A0-4674-AD88-F0B1B16B8122} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {2DF5DD56-FBEA-49CD-9443-9D46DEEEF944} - System32\Tasks\{D1C71F96-9AAB-4054-87C3-8673B64EA10B} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {322F7B8A-43DE-4669-8405-F9FEE4815575} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {3D5576D7-F137-456F-ACF7-4E6951BCAAAE} - System32\Tasks\{5F9DF423-7D3C-427E-81DF-1C0A3089E864} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {45D8E408-144E-40D2-9CC8-945D0CC76826} - System32\Tasks\{B7775B54-F6E5-4832-B4BE-E877DE2F3B45} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {4BAC4AD4-0AFA-4599-BF47-E4110BB1E66E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {5D8AAF0F-B35F-44DF-940F-949DD8FB752C} - System32\Tasks\{81C7480D-65DF-4F3C-ADE7-3B3D3A21A13A} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {67A2DD0A-7E44-4505-9669-67B017F40EEE} - System32\Tasks\{626B8230-16CC-48CF-A490-58CEED8E21A8} => pcalua.exe -a "C:\Users\xxxxx\Desktop\Kontakt 4 Factory Content Setup PC.exe" -d "C:\Users\xxxxx\Desktop" Task: {6B31B445-731D-4169-8747-370AC6CE856E} - System32\Tasks\{2AD3E5CD-846C-454C-8F5E-66F9BD146432} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {78468091-1F8B-4889-88B6-09283C587F7A} - System32\Tasks\{5746D425-FB45-49FB-89AC-6D718D8AAB96} => pcalua.exe -a H:\setup.exe -d H:\ Task: {7ABB794D-4402-4F4B-AAE6-A683947D3A5F} - System32\Tasks\{2CBFBC4B-2D9E-4357-AF11-0F0709DF2A74} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {83BF8E31-F091-46C7-90E7-5ABBACBBFB90} - System32\Tasks\{4898AA0A-DFAB-4D6E-90A0-A8B280D99E75} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {894932C1-A298-4A4C-BCDD-E4BA7387C27F} - System32\Tasks\AdobeAAMUpdater-1.0-xxxxx-PC-xxxxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-05-16] (Adobe Systems Incorporated) Task: {95398875-A3E3-45A8-A3A4-1F8424E8D14C} - System32\Tasks\{BFAD21FD-87DD-4D57-8435-CAF757D6A11F} => pcalua.exe -a H:\windows\german\pm\personal\Setup.exe -d H:\windows\german\pm\personal Task: {9C84F1F2-3512-4CE1-A371-B703568C1E31} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {A3B740FE-B024-42AE-8090-69BF33EA3B3A} - System32\Tasks\{5853299B-4259-442D-85A5-8CC6580067B3} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {A5428D3A-522E-4698-818D-012D47A16CB5} - System32\Tasks\{07A01D39-F62B-4A0F-A2E0-E53256F212E9} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {ABA56809-A401-4F32-874C-F1A51A3589C4} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {ABE5DB4C-EC69-4E54-A15A-A495205ACB52} - System32\Tasks\{B76EAEE9-550E-4B96-99EA-F859C946EBCA} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {ABECAB4D-8FF9-45AF-A0D9-51D2A67D355F} - System32\Tasks\{C8AE0818-88F1-4A18-A57B-B441BE68ECA4} => pcalua.exe -a "D:\Retro ADpak Installer.exe" -d D:\ Task: {B076D6CE-39BD-4472-985B-7919F96AAB82} - System32\Tasks\{7C16986C-0877-491D-ABB6-88470C77EE5B} => pcalua.exe -a "G:\Downloads\Universal Audio\UAD-Win-v580.exe" -d "G:\Downloads\Universal Audio" Task: {B4148331-B027-4713-AE36-D5E9929070D7} - System32\Tasks\{51E7D79B-2CAA-4FFC-ABD0-363FA9548361} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {BA31E6FA-43E9-4DD4-9608-A8C89C69160B} - System32\Tasks\{D1FC40E7-6029-4CC3-A406-CD8EBE42631A} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {BA347F6F-00F2-472A-AF65-19A3D1DFB2A3} - System32\Tasks\{06423D2D-E9C1-4F33-B81A-82C715621358} => pcalua.exe -a "H:\Alicias Keys Setup PC.exe" -d H:\ Task: {BC37EC53-D032-424F-A403-D85B9824E3F9} - System32\Tasks\{B04DD4E4-4CDD-43D9-8750-AF953E20A112} => pcalua.exe -a "O:\Program Files (x86)\VSL\Vienna Instruments\LibraryInstaller.exe" -d "O:\Program Files (x86)\VSL\Vienna Instruments" Task: {BD10712F-BDCC-40A6-9840-FF84C52BE6FD} - System32\Tasks\{2C46918F-A593-4956-88DE-8F999A59AE9C} => pcalua.exe -a "H:\Independence Pro 2.5.4 Software Suite 64 E-License.exe" -d H:\ Task: {BF7ABB10-6A68-409E-8008-EB534F8F8705} - System32\Tasks\{D398A544-CFB3-46E8-B5DF-626FF232C43B} => pcalua.exe -a "C:\Users\xxxxx\Downloads\install_flash_player.exe" -d "C:\Users\xxxxx\Downloads" Task: {C18139FF-A0AB-4047-8DDD-39525E452E10} - System32\Tasks\{6904D156-3764-4007-AEC4-9544A7DA37E0} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {C37AE386-CBA9-43AE-9844-B2CE7224BE33} - System32\Tasks\{1D409CDB-4184-4914-A0E6-97AD74AC8C6D} => H:\windows\german\pm\personal\Setup.exe Task: {C667DE3E-8FA6-443B-9CCC-7B757AB7C2C4} - System32\Tasks\{85AF413A-1425-4DA2-BFA3-8E5B4A8E3B8B} => pcalua.exe -a "D:\Cubase 7 for Windows\Setup.exe" -d "D:\Cubase 7 for Windows" Task: {C73A72CF-5138-48BE-BF08-78546B184472} - System32\Tasks\{0BCE0B9C-45A2-40B0-9941-9F39BDACB669} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {C92F3D73-0DF8-4A42-8396-F321B5E87D9A} - System32\Tasks\{EFB4A033-2F63-4013-82D3-FEDE6E7A8D55} => C:\Windows\System32\SoftLcd1082.exe Task: {CA870B03-DCDD-48C0-98C2-D714511B21F1} - System32\Tasks\{C14BF85D-4129-4CE4-AD72-D630D327CC26} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {D0CB62B8-3961-4DED-AC91-4AE23D264B6B} - System32\Tasks\{9B31F731-5050-4586-98EF-74A01C60D886} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {D401F2A2-731E-4682-BF5A-9AC9585DE606} - System32\Tasks\{674EA2D3-4F3C-4EA3-8749-2D08682045A0} => pcalua.exe -a "C:\Users\xxxxx\Downloads\DriverSetup.exe" -d "C:\Users\xxxxx\Downloads" Task: {D57D1B7C-1831-4FAD-BF64-203A05D8D136} - System32\Tasks\{E6A7A111-7169-4964-9496-AA39C0C5D697} => pcalua.exe -a H:\Autorun.exe -d H:\ Task: {DF1EB108-2A31-441E-971D-1CD931F8A30E} - System32\Tasks\{C4C278E8-DFDC-4D88-A004-A03664E2C937} => C:\Program Files\Steinberg\Asio\asioglldsetup.exe [2010-12-06] (Steinberg Media Technologies) Task: {E2AD9959-656C-4596-9ABE-C3AB27091F0E} - System32\Tasks\{E3C7FEEC-A48E-4A6B-8D20-9CDC54920125} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {E618B9A0-0D06-45B0-BCFA-BF36790B1C72} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {E9E16472-D60C-48EA-B60E-E2548DF10B2B} - System32\Tasks\{B74E7334-75CB-455D-8C95-F754C20EBF68} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {EB90BB02-A30C-4C16-A089-2811D2AA2EB7} - System32\Tasks\{665362E6-1AD6-479D-ABD8-BCF17AE72325} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {F2D8BAA3-CBCA-4E56-B0D4-0E6B5B601F6E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft) Task: {FD61B29E-C3EA-4605-9193-7EF307CC5001} - System32\Tasks\{B6B539BF-11D3-4E9C-BB34-34F0B21FCC70} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {FF6AC220-F9ED-43A6-A526-138A6488B389} - System32\Tasks\{8F48DE62-F226-4564-A004-BC06D47FE024} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe ==================== Loaded Modules (whitelisted) ============= 2013-08-11 13:11 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-06-13 00:10 - 2010-01-19 03:31 - 00072304 _____ () C:\Windows\SysWOW64\XSrvSetup.exe 2012-02-04 22:28 - 2012-01-09 19:44 - 00193536 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2014-08-30 17:12 - 2014-08-30 17:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll 2012-04-27 17:33 - 2012-04-27 17:33 - 00435552 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ulxmlrpcpp.dll 2012-06-13 00:09 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2015-01-03 14:13 - 2015-01-03 14:13 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00459048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00587048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00332584 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com\nponlinebanking.dll 2012-04-27 21:21 - 2012-04-27 21:21 - 13005104 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ti_managers.dll 2012-04-27 18:09 - 2012-04-27 18:09 - 00018784 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Program Files\Common Files\System:bkJR4Q5ekubuEytkHOHN9FDldZk AlternateDataStreams: C:\ProgramData\Microsoft:0JpKqUFDcPdEORJ8qNFp8w AlternateDataStreams: C:\ProgramData\Microsoft:5hYrtYXv4RFuvoGmPrGD2NLHTREw AlternateDataStreams: C:\ProgramData\Microsoft:5KfNWpWNPX1wbFxFO3E9ImnmfLp AlternateDataStreams: C:\ProgramData\Microsoft:9kl92Sfgv9VOx5y487Gb AlternateDataStreams: C:\ProgramData\Microsoft:e6QV9RBqH5tBpkOJ825uc44 AlternateDataStreams: C:\ProgramData\Microsoft:EmZUO1ghceEFEfgohiyQTSr AlternateDataStreams: C:\ProgramData\Microsoft:FIzD2p7hRpzMsiWzLU4FWAu4DG2Y AlternateDataStreams: C:\ProgramData\Microsoft:gEDtHGZl5VBhyUDsChb AlternateDataStreams: C:\ProgramData\Microsoft:iBRVEzFW1llEoLZcS3VLEeVCW AlternateDataStreams: C:\ProgramData\Microsoft:JFbsLoAG7ylh6FO5F5B AlternateDataStreams: C:\ProgramData\Microsoft:lJgRnpcsZyHzZ9RcWOe669vqjX AlternateDataStreams: C:\ProgramData\Microsoft:mzLKEwry2nZIbRjOEIHNQyz AlternateDataStreams: C:\ProgramData\Microsoft:P2kNTjY7GAAENqAnpY AlternateDataStreams: C:\ProgramData\Microsoft:PbjOONTVgtPL20OMMjQAGQFm AlternateDataStreams: C:\ProgramData\Microsoft:pyWUynYKzFVcmjsLti7Jn2f AlternateDataStreams: C:\ProgramData\Microsoft:qpD21ezWETolKR7zxZN132 AlternateDataStreams: C:\ProgramData\Microsoft:rTbZl3fuV0KA1SBvenaKkXxQGQGGNo AlternateDataStreams: C:\ProgramData\Microsoft:u8EGYeTR5GuwkeSSaotMc8NQ1BG3Tt AlternateDataStreams: C:\ProgramData\Microsoft:V7JFxnYuTdgxFTad71b7riK9u2 AlternateDataStreams: C:\Users\xxxxx\Cookies:0HxNukw9hQPeAlOyhj AlternateDataStreams: C:\Users\xxxxx\Cookies:2sTxxI2AoieXEXStwlc AlternateDataStreams: C:\Users\xxxxx\Cookies:fqAY3vHSNIV8wb0vtZQlu58L1sO AlternateDataStreams: C:\Users\xxxxx\Cookies:maNpXg26EfLhAYLVCg5bm9NQ AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\AppData\Local:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\AppData\Local:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\AppData\Local:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\AppData\Local:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\AppData\Local:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:EkLl8viNdpZaDt5BtyibJZWv AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:O3Gupa96puwZsDBndwL AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:SulGbcoM5k5htOkrT6oFYFHf AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:ughxnTcu7B6kj3rj AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:VTgSC9p3AXvhXEs6X1UKGxWVvAyMr AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:0L9d5Wklr9wAn9cdrskJuAF6 AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:fhI0qFS4NI538e7huuTv8eRfF AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:xe6TJQ53vIYg0hq1z2ARUrHBzOpe ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" MSCONFIG\startupreg: AcronisTimounterMonitor => C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: DigidesignMMERefresh => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: StartFw1082Panel => fw1082panel.exe H MSCONFIG\startupreg: STCAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe MSCONFIG\startupreg: ZyngaGamesAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" ========================= Accounts: ========================== 28D925BEF4154602B49E (S-1-5-21-25170337-1842596019-2157349911-1005 - Limited - Enabled) Administrator (S-1-5-21-25170337-1842596019-2157349911-500 - Administrator - Disabled) E14ACD8B9526477D8048 (S-1-5-21-25170337-1842596019-2157349911-1003 - Limited - Enabled) Gast (S-1-5-21-25170337-1842596019-2157349911-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-25170337-1842596019-2157349911-1008 - Limited - Enabled) xxxxx (S-1-5-21-25170337-1842596019-2157349911-1000 - Administrator - Enabled) => C:\Users\xxxxx ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/09/2015 11:56:06 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/09/2015 05:55:26 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/09/2015 05:55:14 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/09/2015 05:55:14 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/09/2015 05:53:34 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/09/2015 05:53:30 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/09/2015 05:37:10 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "S:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (01/04/2015 05:21:23 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (01/04/2015 05:19:37 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"2" in Zeile WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0". Definition: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (01/04/2015 05:10:32 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"2" in Zeile WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0". Definition: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. System errors: ============= Error: (01/09/2015 05:27:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/09/2015 05:27:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/09/2015 05:27:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (01/09/2015 05:27:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/09/2015 05:27:06 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cvintdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (01/04/2015 05:19:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/04/2015 05:18:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/04/2015 05:18:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (01/04/2015 05:18:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/04/2015 05:18:08 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cvintdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2015-01-04 12:35:45.929 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2015-01-04 12:35:45.902 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:25.747 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:25.716 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:23.173 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:23.157 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Percentage of memory in use: 27% Total physical RAM: 16346.31 MB Available physical RAM: 11811.54 MB Total Pagefile: 32690.8 MB Available Pagefile: 28140.06 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: (Win7 System) (Fixed) (Total:467.64 GB) (Free:133.66 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: (Lokales Laufwerk ) (Fixed) (Total:99.82 GB) (Free:79.72 GB) NTFS Drive f: (W7 Cubase/WaveLab) (Fixed) (Total:467.64 GB) (Free:287.16 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive g: (W7 Adobe/Daten/Sonstiges) (Fixed) (Total:463.87 GB) (Free:271.28 GB) NTFS Drive i: (Plug Ins 2) (Fixed) (Total:463.87 GB) (Free:188.67 GB) NTFS Drive k: (Lokales Laufwerk) (Fixed) (Total:123.68 GB) (Free:58.67 GB) NTFS Drive o: (W7 Plug Ins) (Fixed) (Total:708.01 GB) (Free:318.29 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B0C5A5B3) Partition 1: (Active) - (Size=467.6 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1A679F39) Partition 1: (Not Active) - (Size=123.7 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=708 GB) - (Type=07 NTFS) Partition 3: (Active) - (Size=99.8 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 88618861) Partition 1: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS) Partition 2: (Active) - (Size=467.6 GB) - (Type=07 NTFS) ==================== End Of Log ============================ So, ich hoffe ich hab alles richtig gemacht. Was mir bis jetzt aufgefallen ist, der weisse Bildschirm nach dem Anmelden auf dem Benutzerkonto ist Momentan nicht mehr da, auch fährt der PC jetzt etwas schneller hoch als vorher. Aber noch sind wir ja wohl nicht fertig. Wobei ich den Grafikkartentreiber zwischendurch auch mal erneuert habe. Aber obs daran liegt ? Eher nicht. Noch ne Frage, wie bekomme ich den all die Programme wieder runter vom PC ? Sind die jetzt tief im System drin ? Mit Systemsteuerung-Programme deiinstallieren (ausser ESET) habe ich nix gefunden, also Combofix, JRT, SecurityCheck und FRST. Reicht einfaches löschen aus ? Gruss |
10.01.2015, 11:58 | #20 |
/// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Die entfernen wir am Schluss ganz einfach Flash Player updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-21-25170337-1842596019-2157349911-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897 Emptytemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.01.2015, 16:33 | #21 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Hallo schrauber, weiter gehts. Allerdings nur eine Sache vorab. Nachdem ich die Fixlist erstellt hatte und mit FRST ein Fixlog habe machen lassen, hat sich der PC kurz nachdem er damit fertig war selbst runtergefahren. Danach hatte ich plötzlich wieder diesen kurzen weissen Bildschirm nach dem Anmelden. Normal ??? Jetzt die Logs: Fixlog: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-01-2015 Ran by xxxxx at 2015-01-10 15:59:49 Run:1 Running from C:\Users\xxxxx\Desktop Loaded Profile: xxxxx (Available profiles: xxxxx) Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-25170337-1842596019-2157349911-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897 Emptytemp: ***************** "HKU\S-1-5-21-25170337-1842596019-2157349911-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully. EmptyTemp: => Removed 603.5 MB temporary data. The system needed a reboot. ==== End of Fixlog 15:59:56 ==== FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015 Ran by xxxxx (administrator) on xxxxx-PC on 10-01-2015 16:06:45 Running from C:\Users\xxxxx\Desktop Loaded Profile: xxxxx (Available profiles: xxxxx) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Windows\SysWOW64\XSrvSetup.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Nikon Corporation) C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-05-16] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393616 2011-03-30] (KORG Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] () HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation) HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKU\S-1-5-21-25170337-1842596019-2157349911-1000\...\RunOnce: [Adobe Speed Launcher] => 1420902183 ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\shellex.dll (Kaspersky Lab ZAO) ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\shellex.dll (Kaspersky Lab ZAO) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897 HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {1B293868-8F4D-4b37-89CA-75BBD8747680} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {90DC3FD6-1CAD-415a-8ED1-67062890BB03} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms} BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\fu0cgvgf.default FF DefaultSearchUrl: hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF SelectedSearchEngine: Google FF Homepage: hxxp://t-online.de/ FF NetworkProxy: "type", 4 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @ilok.com/iLokHelper,version=3.1.0.7 -> C:\Program Files (x86)\PACE Anti-Piracy\iLok\NPPaceILok.dll ( PACE Anti-Piracy, Inc) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com () FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com () FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com () FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll () FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll () FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2015-01-03] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2015-01-03] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010-02-06] FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com FF Extension: Безпечні платежі - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com [2015-01-03] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [1155072 2008-12-16] (MAGIX AG) [File not signed] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed] S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation) R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] () R2 LanmanWorkstation; C:\Windows\System32\aptwj1dm3.dll [289280 2012-04-21] (Works Ltd.) [File not signed] R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed] R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [5018624 2010-03-25] (Native Instruments GmbH) [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) S3 PSEXESVC; C:\Windows\PSEXESVC.exe [189792 2015-01-03] (Sysinternals) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] S3 UPnPService; C:\Program Files (x86)\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG) [File not signed] S2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe -s [X] S2 TryAndDecideService; "C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] () R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch) S2 cvintdrv; C:\Windows\SysWow64\Drivers\cvintdrv.sys [7140 2003-07-29] () [File not signed] S3 Fw1082; C:\Windows\System32\Drivers\Fw1082x64.sys [228864 2010-03-03] (TASCAM) S3 Fw1082WdmService; C:\Windows\System32\Drivers\FW1082Wdmx64.sys [70144 2010-03-16] (TASCAM) S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-01-04] () R3 hypaudio; C:\Windows\System32\DRIVERS\hypaudio64.sys [1484800 2010-11-30] (Universal Audio, Inc.) R3 hypkern; C:\Windows\System32\drivers\hypkern64.sys [225792 2010-11-30] () R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-04-11] () R3 iLokDrvr; C:\Windows\SysWOW64\DRIVERS\iLokDrvr.sys [54328 2009-12-02] (PACE Anti-Piracy, Inc.) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-01-03] (Kaspersky Lab ZAO) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [818888 2015-01-03] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-01-03] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO) R3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [33656 2011-03-30] (KORG INC.) S3 MADFUFTU; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra_DFU.sys [45832 2009-09-25] (M-Audio) S3 MAUSBFASTTRACKULTRA; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra.sys [180496 2013-06-18] (M-Audio) R3 mlkumidi; C:\Windows\System32\drivers\mlkumidi.sys [55856 2014-08-30] (MusicLab, Inc.) R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [111696 2012-01-21] () R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 paeusbaudio; C:\Windows\System32\DRIVERS\paeusbaudio_x64.sys [252280 2012-05-24] () S3 paeusbaudiodsp; C:\Windows\System32\DRIVERS\paeusbaudiodsp_x64.sys [71544 2012-05-24] () S3 paeusbaudioks; C:\Windows\System32\DRIVERS\paeusbaudioks_x64.sys [53112 2012-05-24] () S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] () S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [25504 2013-10-21] (Resplendence Software Projects Sp.) S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [142120 2007-04-27] (SafeNet, Inc.) R3 SynUSB64; C:\Windows\System32\DRIVERS\SynUSB64.sys [30352 2009-06-26] (Steinberg Media Technologies GmbH) R0 Tpkd; C:\Windows\SysWow64\Drivers\Tpkd.sys [86528 2008-07-02] (PACE Anti-Piracy, Inc.) [File not signed] R3 UAD2System; C:\Windows\System32\DRIVERS\UAD2System.sys [58368 2010-11-30] (Universal Audio Inc.) R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51016 2011-11-01] (Yamaha Corporation) R3 ysusb64; C:\Windows\System32\drivers\ysusb64.sys [132200 2013-12-17] (Yamaha Corporation) S3 BEHRINGER_2902; System32\Drivers\BUSB2902.sys [X] S3 BUSB_AUDIO_WDM; system32\drivers\busbwdm.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 cpuz134; \??\C:\Program Files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys [X] S3 GMSIPCI; \??\H:\INSTALL\GMSIPCI.SYS [X] S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [X] S3 TASCAM_US1800; System32\Drivers\tus1800u.sys [X] S3 TASCAM_US1800_MIDI; system32\drivers\tus1800m.sys [X] S3 TASCAM_US1800_WDM; system32\drivers\tus1800a.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-10 16:06 - 2015-01-10 16:07 - 00022740 _____ () C:\Users\xxxxx\Desktop\FRST.txt 2015-01-10 14:07 - 2015-01-10 14:07 - 00000931 _____ () C:\Users\Public\Desktop\WaveLab 8.5 (64).lnk 2015-01-10 14:07 - 2015-01-10 14:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaveLab 8.5 (64) 2015-01-10 13:26 - 2015-01-10 13:26 - 17340080 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-01-10 12:25 - 2015-01-10 15:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-10 12:25 - 2015-01-10 13:26 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-10 12:07 - 2015-01-10 12:10 - 34200128 _____ (Steinberg Media Technologies GmbH) C:\Users\xxxxx\Downloads\eLicenserControlSetup.exe 2015-01-10 11:51 - 2015-01-10 11:51 - 00002113 _____ () C:\Users\xxxxx\Desktop\Cubase 8 64bit.lnk 2015-01-10 11:51 - 2015-01-10 11:51 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\VST XMLs 2015-01-10 11:51 - 2015-01-10 11:51 - 00000000 ____D () C:\Users\Jxxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 8 64bit 2015-01-10 11:48 - 2015-01-10 11:48 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Steinberg Installation Updater 2015-01-10 11:48 - 2015-01-10 11:48 - 00000000 ____D () C:\Users\xxxxx\AppData\Local\Steinberg Installation Updater 2015-01-10 11:15 - 2015-01-10 14:11 - 00000000 ____D () C:\Program Files (x86)\FXpansion 2015-01-10 11:15 - 2015-01-10 13:58 - 00002182 _____ () C:\Users\xxxxx\Desktop\License Manager.lnk 2015-01-10 11:15 - 2015-01-10 13:58 - 00000997 _____ () C:\Users\xxxxx\Desktop\BFD3 (64-bit).lnk 2015-01-10 11:15 - 2015-01-10 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FXpansion 2015-01-10 11:15 - 2015-01-10 11:15 - 00000000 ____D () C:\ProgramData\FXpansion 2015-01-10 11:10 - 2015-01-10 14:10 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\FXpansion 2015-01-09 23:58 - 2015-01-09 23:58 - 00852505 _____ () C:\Users\xxxxx\Desktop\SecurityCheck.exe 2015-01-04 16:48 - 2015-01-04 16:48 - 00001070 _____ () C:\Users\Public\Desktop\Service Center.lnk 2015-01-04 16:48 - 2015-01-04 16:48 - 00000000 __HDC () C:\ProgramData\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B} 2015-01-04 16:48 - 2015-01-04 16:48 - 00000000 __HDC () C:\ProgramData\{36047B27-9342-4F25-AB0D-F0DFC71A650A} 2015-01-04 15:56 - 2015-01-10 00:03 - 02124288 _____ (Farbar) C:\Users\xxxxx\Desktop\FRST64.exe 2015-01-04 15:42 - 2015-01-04 15:42 - 00000000 ____D () C:\Windows\ERUNT 2015-01-04 15:28 - 2015-01-04 15:29 - 01707939 _____ (Thisisu) C:\Users\xxxxx\Desktop\JRT.exe 2015-01-04 15:07 - 2015-01-04 15:20 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-04 14:23 - 2015-01-04 14:23 - 00000000 ____D () C:\Users\Public\Documents\NI Resources 2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD 2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD 2015-01-04 13:48 - 2006-05-11 12:30 - 00393216 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_IRC_1_0_3.dll 2015-01-04 13:48 - 2006-05-11 12:30 - 00061440 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_DFD_1_4.dll 2015-01-04 13:39 - 2015-01-04 13:39 - 00309448 _____ () C:\Windows\Minidump\010415-49499-01.dmp 2015-01-04 13:36 - 2015-01-04 13:38 - 730927694 _____ () C:\Windows\MEMORY.DMP 2015-01-04 13:34 - 2014-07-02 18:44 - 00609240 _____ () C:\Windows\SysWOW64\nvStreaming.exe 2015-01-04 13:32 - 2014-07-02 21:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-01-04 13:32 - 2014-07-02 21:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-01-04 13:30 - 2015-01-04 13:30 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-01-04 13:30 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-01-04 13:30 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-01-04 13:30 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-01-04 13:26 - 2015-01-04 13:29 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\xxxxx\Downloads\mbam-setup-2.0.4.1028.exe 2015-01-04 12:52 - 2015-01-04 12:52 - 00029411 _____ () C:\ComboFix.txt 2015-01-04 12:27 - 2015-01-04 12:52 - 00000000 ____D () C:\Qoobox 2015-01-04 12:27 - 2015-01-04 12:49 - 00000000 ____D () C:\Windows\erdnt 2015-01-04 12:27 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2015-01-04 12:27 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2015-01-04 12:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2015-01-04 12:22 - 2015-01-04 12:22 - 05609858 ____R (Swearware) C:\Users\xxxxx\Desktop\ComboFix.exe 2015-01-04 12:12 - 2015-01-04 12:12 - 00002898 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-03 22:28 - 2015-01-03 22:28 - 00002314 _____ () C:\Users\xxxxx\Desktop\Sicherer Zahlungsverkehr.lnk 2015-01-03 22:24 - 2015-01-03 22:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security 2015-01-03 22:23 - 2015-01-03 22:23 - 00000000 ___SD () C:\Users\xxxxx\Documents\Passwords Database 2015-01-03 22:23 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2015-01-03 22:22 - 2015-01-03 22:22 - 00000000 ____D () C:\Windows\ELAMBKUP 2015-01-03 22:21 - 2015-01-03 22:49 - 00818888 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2015-01-03 22:21 - 2015-01-03 22:49 - 00150536 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2015-01-03 22:21 - 2014-08-12 18:33 - 00246456 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys 2015-01-03 22:17 - 2015-01-03 22:17 - 00000000 __HDC () C:\ProgramData\{B18B6B47-547B-4884-B977-E30BBCB3C043} 2015-01-03 22:16 - 2015-01-03 22:16 - 00000000 __HDC () C:\ProgramData\{0FBC18ED-38E5-47CD-909E-26B2242C6C2D} 2015-01-03 22:15 - 2015-01-03 22:15 - 00000000 __HDC () C:\ProgramData\{074595B0-0A1C-4DFF-AA89-993E1954016E} 2015-01-03 22:14 - 2015-01-03 22:14 - 00000888 _____ () C:\Users\Public\Desktop\Kontakt 5.lnk 2015-01-03 22:14 - 2015-01-03 22:14 - 00000000 __HDC () C:\ProgramData\{2E9C94ED-C152-4D5D-8E21-AAE23373844C} 2015-01-03 19:50 - 2015-01-03 19:50 - 00001846 _____ () C:\Users\Public\Desktop\EZkeys-64.lnk 2015-01-03 17:50 - 2015-01-03 17:54 - 34200128 _____ (Steinberg Media Technologies GmbH) C:\Users\xxxxx\Downloads\eLicenserControlSetup(2).exe 2015-01-03 17:47 - 2015-01-03 17:47 - 00000909 _____ () C:\Users\Public\Desktop\WaveLab 8 (64).lnk 2015-01-03 17:47 - 2015-01-03 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaveLab 8 (64) 2015-01-03 17:47 - 2012-08-10 06:26 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2015-01-03 17:09 - 2015-01-03 17:09 - 00189792 _____ (Sysinternals) C:\Windows\PSEXESVC.exe 2015-01-03 16:48 - 2014-12-24 06:23 - 00000000 ____D () C:\Users\xxxxx\Downloads\LicenseSupportInstallerWin64_v2.4.5_r27678 2015-01-03 16:41 - 2015-01-03 16:52 - 00000530 _____ () C:\Windows\DtcInstall.log 2015-01-03 16:21 - 2015-01-03 16:51 - 00002028 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk 2015-01-03 16:21 - 2015-01-03 16:51 - 00002016 _____ () C:\Users\Public\Desktop\iLok License Manager.lnk 2015-01-03 16:20 - 2015-01-03 16:51 - 00000000 ____D () C:\Program Files (x86)\iLok License Manager 2015-01-03 14:37 - 2015-01-10 16:06 - 00000000 ____D () C:\FRST 2015-01-03 14:13 - 2015-01-03 14:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-03 13:30 - 2015-01-03 13:31 - 02173952 _____ () C:\Users\xxxxx\Desktop\adwcleaner_4.106.exe 2015-01-03 12:55 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-01-03 12:55 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-13 11:43 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-13 11:43 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-13 11:40 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-13 11:40 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-13 11:40 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-13 11:40 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-13 11:40 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-13 11:40 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-13 11:40 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-13 11:40 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-13 11:40 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-13 11:40 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-13 11:40 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-13 11:40 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-13 11:40 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-13 11:40 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-13 11:40 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-13 11:40 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-13 11:40 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-13 11:40 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-13 11:40 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-13 11:40 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-13 11:40 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-13 11:40 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-13 11:40 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-13 11:40 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-13 11:40 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-13 11:40 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-13 11:40 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-13 11:40 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-13 11:40 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-13 11:40 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-13 11:40 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-13 11:40 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-13 11:40 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-13 11:40 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-13 11:40 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-13 11:40 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-13 11:40 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-13 11:40 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-13 11:40 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-13 11:40 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-13 11:40 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-13 11:40 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-13 11:40 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-13 11:40 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-13 11:40 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-13 11:40 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-13 11:40 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-13 11:40 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-13 11:40 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-13 11:40 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-13 11:40 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-13 11:40 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-13 11:40 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-13 11:40 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-13 11:36 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-13 11:36 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-13 11:34 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-13 11:34 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-13 11:34 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-13 11:34 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-13 11:34 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-13 11:34 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-13 11:34 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-13 11:34 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-13 11:34 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-13 11:34 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-13 11:34 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-10 16:03 - 2013-07-12 12:37 - 00079870 _____ () C:\Windows\setupact.log 2015-01-10 16:02 - 2012-02-12 14:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2015-01-10 16:01 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-10 16:01 - 2012-09-17 13:14 - 00078670 _____ () C:\Windows\mlkumidi.log 2015-01-10 16:01 - 2010-01-27 16:29 - 00385866 _____ () C:\Windows\PFRO.log 2015-01-10 16:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-10 16:00 - 2013-07-12 12:41 - 02093793 _____ () C:\Windows\WindowsUpdate.log 2015-01-10 14:40 - 2010-01-25 17:07 - 00000000 ____D () C:\Program Files (x86)\Steinberg 2015-01-10 14:07 - 2010-01-30 18:20 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Steinberg 2015-01-10 14:06 - 2012-12-08 18:07 - 00000000 ____D () C:\Program Files\Steinberg 2015-01-10 13:26 - 2012-06-07 13:31 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-10 13:26 - 2011-05-20 23:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-10 12:25 - 2014-06-21 12:00 - 00000000 ____D () C:\Users\xxxxx\AppData\Local\Adobe 2015-01-10 12:11 - 2010-01-30 18:34 - 00000049 _____ () C:\Windows\SysWOW64\SYNSOPOS.exe.cfg 2015-01-10 12:11 - 2010-01-30 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser 2015-01-10 12:11 - 2010-01-25 17:07 - 00563400 _____ () C:\Windows\DPINST.LOG 2015-01-10 11:52 - 2010-01-30 18:21 - 00000000 ____D () C:\ProgramData\Steinberg 2015-01-10 11:21 - 2009-07-14 18:58 - 11838790 _____ () C:\Windows\system32\perfh007.dat 2015-01-10 11:21 - 2009-07-14 18:58 - 03637322 _____ () C:\Windows\system32\perfc007.dat 2015-01-10 11:21 - 2009-07-14 06:13 - 00006340 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-10 11:15 - 2011-08-05 15:00 - 00000000 ____D () C:\Program Files (x86)\VstPlugIns 2015-01-10 10:43 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-10 10:43 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-04 17:16 - 2014-11-23 10:11 - 00000000 ____D () C:\AdwCleaner 2015-01-04 17:04 - 2010-01-31 13:12 - 00000000 ____D () C:\temp 2015-01-04 17:03 - 2013-12-07 13:16 - 00001995 _____ () C:\Users\Public\Desktop\Cubase 7.5 64bit.lnk 2015-01-04 16:52 - 2010-01-31 13:37 - 00000000 ____D () C:\Users\xxxxx\Documents\Native Instruments 2015-01-04 16:48 - 2010-01-31 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2015-01-04 16:48 - 2010-01-31 14:33 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2015-01-04 13:39 - 2010-01-30 19:36 - 00000000 ____D () C:\Windows\Minidump 2015-01-04 13:34 - 2013-08-11 13:12 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2015-01-04 13:33 - 2010-02-06 19:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-01-04 13:32 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-01-04 12:52 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2015-01-04 12:41 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2015-01-04 12:39 - 2009-07-14 03:34 - 94371840 _____ () C:\Windows\system32\config\software.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 37748736 _____ () C:\Windows\system32\config\system.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2015-01-04 12:13 - 2012-06-13 08:45 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2015-01-04 12:13 - 2012-06-12 18:24 - 00030528 _____ () C:\Windows\GVTDrv64.sys 2015-01-03 22:49 - 2014-08-13 19:34 - 00077512 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwtp.sys 2015-01-03 22:24 - 2012-09-01 13:17 - 00000000 ____D () C:\Users\xxxxx 2015-01-03 22:24 - 2012-02-12 14:02 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2015-01-03 19:51 - 2011-04-22 15:06 - 00000000 ____D () C:\Users\xxxxx\Documents\Toontrack 2015-01-03 19:51 - 2011-04-22 13:48 - 00000000 ____D () C:\ProgramData\Toontrack 2015-01-03 19:50 - 2011-10-04 14:58 - 00000000 ____D () C:\Program Files\Common Files\VST3 2015-01-03 19:50 - 2010-02-14 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Toontrack 2015-01-03 19:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-01-03 17:41 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\w3data.vss 2015-01-03 17:41 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\msvcsv60.dll 2015-01-03 17:41 - 2011-05-28 12:21 - 00000096 _____ () C:\ProgramData\autobk.inc 2015-01-03 17:41 - 2010-02-15 12:34 - 00000304 _____ () C:\Windows\msocreg32.dat 2015-01-03 17:25 - 2010-02-15 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IK Multimedia 2015-01-03 16:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-01-03 16:23 - 2012-04-27 09:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-03 16:21 - 2010-01-27 16:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-01-03 15:57 - 2014-09-25 14:02 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-13 13:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-12-13 13:31 - 2014-04-26 12:25 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-12-13 11:47 - 2013-07-14 15:54 - 00000000 ____D () C:\Windows\system32\MRT 2014-12-13 11:47 - 2010-02-05 19:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-13 11:44 - 2010-01-25 18:22 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-12-13 11:28 - 2013-04-13 10:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk Files to move or delete: ==================== C:\Users\xxxxx\SOFTUBE PLUG-INS CONTROL.EXE ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-10 15:38 ==================== End Of Log ============================ --- --- --- |
10.01.2015, 16:43 | #22 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Additional:FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015 Ran by xxxxx at 2015-01-10 16:13:50 Running from C:\Users\xxxxx\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Total Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Total Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Total Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) @BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.24 - GIGABYTE) Acronis*True*Image*Home 2012 (HKLM-x32\...\{C1FDF2F0-2136-42D8-8A64-2B45BBF2C19E}Visible) (Version: 15.0.7119 - Acronis) Acronis*True*Image*Home 2012 (x32 Version: 15.0.7119 - Acronis) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.) Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) AmpegSVX (HKLM-x32\...\{CF1D7323-8A0A-49C7-83B0-088DB90721E2}) (Version: 1.1.3 - IK Multimedia) AmpliTube 3 (HKLM-x32\...\{5DD152A8-BFB3-439E-90CD-5C00C2116E23}) (Version: 3.0.0 - IK Multimedia) AmpliTube 3 version 3.14.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.14.0 - IK Multimedia) AmpliTube Fender (HKLM-x32\...\{B178BACA-880B-4D20-85F9-522F7F2DECBE}) (Version: 1.1.0 - IK Multimedia) AmpliTube Jimi Hendrix (HKLM-x32\...\{66BA35B0-1911-47EF-B170-1DCFFDA362F1}) (Version: 1.0.3 - IK Multimedia) AmpliTube2 (HKLM-x32\...\{C95AACD4-9507-4F5C-9D53-22B1ACCFECD1}) (Version: 2.1.4 - IK Multimedia) Antares Autotune VST RTAS TDM v5.08 (HKLM-x32\...\Antares Autotune VST RTAS TDM_is1) (Version: - Team AiR 2007) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ARC System 2 version 2.2.1 (HKLM\...\{4952A610-D484-4F6A-B1B4-33797CFDB821}_is1) (Version: 2.2.1 - IK Multimedia) ArcSoft Panorama Maker 6 (HKLM-x32\...\{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}) (Version: 6.0.8.85 - ArcSoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.) AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE) AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Basic FX Suite (HKLM-x32\...\InstallShield_{45BBAD53-80DB-4DD2-9C50-B5E09EFFAEA7}) (Version: 1.0.0 - Yamaha Corporation) Basic FX Suite (Version: 1.0.0 - Yamaha Corporation) Hidden Best Service Engine 1.0.4 64bit (HKLM-x32\...\Best Service Engine 1.0.4 64bit) (Version: - ) Best Service Galaxy II (HKLM-x32\...\Best Service Galaxy II) (Version: - ) Best Service Galaxy Vintage D (HKLM-x32\...\Best Service Galaxy Vintage D) (Version: - Best Service) Best Service Galaxy Vintage D (Version: 1.0.0.001 - Best Service) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Boris Continuum Complete 7 Adobe CS5 (HKLM\...\{A31D5812-F0AA-4AFA-B584-C2C4AC141518}) (Version: 7.00.0000 - Boris FX, Inc.) Canon MP110 (HKLM\...\{B3467C74-0678-459a-9180-722763E0AFDE}) (Version: - ) Canon ScanGear Starter (HKLM-x32\...\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}) (Version: - ) CS-80V2 2.5.4 (HKLM-x32\...\CS-80V2_is1) (Version: 2.5.4 - Arturia) CSR (HKLM-x32\...\{648C1BFD-6A70-46D8-B855-F84D95C2DC34}) (Version: 1.1.1 - IK Multimedia) Custom Shop version 1.5.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.5.0 - IK Multimedia) DVD-lab PRO 2.3 (HKLM-x32\...\DVD-lab PRO 2.3_is1) (Version: - Mediachance) East West Boesendorfer 290 (HKLM-x32\...\East West Boesendorfer 290) (Version: - ) East West EWQLSO Silver Edition (HKLM-x32\...\East West EWQLSO Silver Edition) (Version: - ) East West Hardcore Bass (HKLM-x32\...\East West Hardcore Bass) (Version: - ) East West Hardcore Bass XP (HKLM-x32\...\East West Hardcore Bass XP) (Version: - ) Easy Tune 6 B12.0402.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE) Easy Tune 6 B12.0402.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Electronic EZmix pack (HKLM-x32\...\{6450F55E-EE0F-4203-A90D-D533EE3F88E4}) (Version: 1.0.0 - Toontrack) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.8.5.1159 - Steinberg Media Technologies GmbH) ELS Vocoder (HKLM-x32\...\ELS Vocoder_is1) (Version: 1.6.0 - Eiosis, Inc.) EZdrummer (HKLM-x32\...\{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}) (Version: 1.3.2 - Toontrack) EZdrummer 2 32-bit (HKLM-x32\...\{7E36EB5B-0739-4DA7-BF26-E63DD2BECA76}) (Version: 2.0.0 - Toontrack) EZdrummer 2 32-bit Update (HKLM-x32\...\{CDE1FC7E-3E9A-48BA-BBB9-65C2026CA0A2}) (Version: 2.0.1 - Toontrack) EZdrummer 2 64-bit (HKLM\...\{B9217824-0EBE-49C7-98A0-A76CC46BBB7D}) (Version: 2.0.0 - Toontrack) EZdrummer 2 64-bit Update (HKLM\...\{11CC8964-9CB0-46E6-9218-CD39ED4A554D}) (Version: 2.0.1 - Toontrack) EZDrummer 64 bit (HKLM\...\{6CEFB8E2-2B47-49AB-B97E-AA1ACF6595E5}) (Version: 1.3.0 - Toontrack) EZDrummer 64-bit (HKLM\...\{80E801DB-5288-4447-AAC2-27F329B61C6E}) (Version: 1.3.2 - Toontrack) EZkeys Classic Electrics 64 (HKLM\...\{2F547D3F-AB60-4319-8513-80DBD3896BA8}) (Version: 1.0.1 - Toontrack) EZmix 32-bit (HKLM-x32\...\{B5AB1F3A-136C-4C87-BB49-0E3ACD5B9F7C}) (Version: 2.0.9 - Toontrack) EZmix 64-bit (HKLM\...\{3D83CC9F-E2E1-47AE-B1AF-F6D3A8825196}) (Version: 2.0.9 - Toontrack) EZXAmericana (HKLM-x32\...\{7DB4839F-DFA6-49D2-907F-740CE65B2D10}) (Version: 1.0.0 - Toontrack) EZXClaustrophobic (HKLM-x32\...\{8094F7AE-CA21-4AF2-A256-BC918CE0E796}) (Version: 1.1.3 - Toontrack) EZXCocktail (HKLM-x32\...\{147567F0-8575-4BE0-B5B3-62706C67FA5A}) (Version: 1.3.0 - Toontrack) EZXFunkmasters (HKLM-x32\...\{BB5A44CB-3045-43E2-BEB0-B64E477D4633}) (Version: 1.0.0 - Toontrack) EZXJazz (HKLM-x32\...\{EED8D44F-CEBB-4298-8D0E-E01AF6AC0663}) (Version: 1.0.0 - Toontrack) EZXVintage (HKLM-x32\...\{430399DC-98BC-4A7F-8F8E-77981CABAE05}) (Version: 1.2.0 - Toontrack) FG-X Virtual Mastering Console (HKLM\...\FG-X Virtual Mastering Console_is1) (Version: - Slate Digital) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{19666E73-D9E5-44D4-8F33-037ED151ECBC}) (Version: 2.1.22.0 - MAGIX AG) FXpansion BFD3 (HKLM-x32\...\FXpansion BFD3) (Version: 3.0.3 - FXpansion Audio UK Ltd) Garritan Jazz Big Band (HKLM-x32\...\Garritan Jazz Big Band) (Version: - ) Garritan Personal Orchestra (HKLM-x32\...\Garritan Personal Orchestra) (Version: - ) Garritan Personal Orchestra KP2 (HKLM-x32\...\Garritan Personal Orchestra KP2) (Version: - ) Gigabyte Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0001 - GIGABYTE Technologies, Inc.) Groove Agent SE Rock Pop Toolbox Drums (HKLM-x32\...\{E9BFA009-DD72-4F2A-84CB-6DF46472B563}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Halls Of Fame Free - Origami Edition 2.5.2 (HKLM-x32\...\Halls Of Fame Free - Origami Edition 2.5.2) (Version: - ) High-Definition Video Playback (x32 Version: 11.1.11500.4.273 - Nero AG) Hidden IK Multimedia Authorization Manager version 1.0.11 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.11 - IK Multimedia) iLok Client Helper (HKLM-x32\...\InstallShield_{DEA491FB-48BC-4B6B-8902-FCD4BAB069BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.) iLok Client Helper (x32 Version: 5.9.1 - PACE Anti-Piracy, Inc.) Hidden iLok Client Helper x32x64 (HKLM-x32\...\InstallShield_{27F0B084-8305-4891-B9FD-4F2E3EDF98D4}) (Version: 5.8.12 - PACE Anti-Piracy) iLok Client Helper x32x64 (x32 Version: 5.8.12 - PACE Anti-Piracy) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Incomedia WebSite X5 v9 - Evolution (HKLM-x32\...\{64392EEB-38EF-45FD-822D-5C75CA136860}_is1) (Version: 9.0.0.1597 - Incomedia s.r.l.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation) Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.) iZotope Nectar Elements (HKLM-x32\...\iZotope Nectar Elements_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Mirrorball Style Pack (HKLM-x32\...\iZotope Nectar Mirrorball Style Pack_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Style Pack 1 (HKLM-x32\...\iZotope Nectar Style Pack 1_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Utility Pack 1 (HKLM-x32\...\iZotope Nectar Utility Pack 1_is1) (Version: 1.00 - iZotope, Inc.) iZotope Ozone 3 (HKLM-x32\...\iZotope Ozone 3_is1) (Version: 3.05 - iZotope, Inc.) iZotope Ozone 4 (HKLM-x32\...\iZotope Ozone 4_is1) (Version: 4.03 - iZotope, Inc.) iZotope Spectron (HKLM-x32\...\iZotope Spectron_is1) (Version: 1.05 - iZotope, Inc.) iZotope Stutter Edit (HKLM-x32\...\iZotope Stutter Edit_is1) (Version: 1.04 - iZotope, Inc.) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) Jazz and Big Band KP2 (HKLM-x32\...\Jazz and Big Band KP2) (Version: - ) JBridge (HKLM-x32\...\JBridge) (Version: - JBridge) <==== ATTENTION! Jupiter-8V2 2.5.5 (HKLM-x32\...\jupiter8v25_is1) (Version: 2.5.5 - Arturia) Kaspersky Total Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) Kaspersky Total Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden K-Lite Codec Pack 6.4.5 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 6.4.5 - ) K-Lite Mega Codec Pack 8.9.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.9.5 - ) KORG padKONTROL Editor Librarian (HKLM-x32\...\{D77332DD-FA53-4E49-9F4B-3863B8D56196}) (Version: 1.01.0010 - KORG Inc.) KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{B3CB5BA3-3E98-4E85-944E-B03D055F8450}) (Version: 1.13.0601 - Korg Inc.) LatencyMon 6.00 (HKLM\...\LatencyMon_is1) (Version: - Resplendence Software Projects Sp.) LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe) Magic Bullet Looks (HKLM-x32\...\InstallShield_{595AC242-897D-494C-A278-2A2781403824}) (Version: 1.4.1 - Red Giant Software) Magic Bullet Looks (Version: 1.4.1 - Red Giant Software) Hidden Magic Bullet Mojo (HKLM-x32\...\InstallShield_{40E89076-E040-421E-AEB7-D931F8B07401}) (Version: 1.2.0 - Red Giant Software) Magic Bullet Mojo (Version: 1.2.0 - Red Giant Software) Hidden MAGIX 3D Maker (embeded) (HKLM-x32\...\MAGIX 3D Maker D) (Version: 6.0.0.3 - MAGIX AG) MAGIX Foto Manager 8 6.0.1.457 (D) (HKLM-x32\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.457 - MAGIX AG) MAGIX Foto Premium 3.1.0.11 (D) (HKLM-x32\...\MAGIX Foto Premium D) (Version: 3.1.0.11 - MAGIX AG) MAGIX Fotobuch 3.6 (HKLM-x32\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG) MAGIX MP3 Maker 15 10.0.0.257 (D) (HKLM-x32\...\MAGIX MP3 Maker 15 D) (Version: 10.0.0.257 - MAGIX AG) MAGIX Online Druck Service 3.4.3.0 (D) (HKLM-x32\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG) MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG) MAGIX Website Maker 4 1.13.0.112 (D) (HKLM-x32\...\MAGIX Website Maker 4 D) (Version: 1.13.0.112 - MAGIX AG) Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net) Melodyne 3.2 (HKLM-x32\...\{A1F143D1-1F0D-44FB-A44B-71D4367D16DE}) (Version: 3.2.0202 - Celemony Software GmbH) Melodyne 3.2 (x32 Version: 3.2.0202 - Celemony Software GmbH) Hidden Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH) Melodyne singletrack (HKLM-x32\...\{16DF894D-FC3F-4B87-908D-671E201CD7A8}) (Version: 2.01.0045 - Celemony Software GmbH) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 1.0.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version: - ) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation) Mini V 2.5.5 (HKLM-x32\...\miniv2_5_is1) (Version: 2.5.5 - Arturia) minimoog V 1.6 (HKLM-x32\...\minimoog V_is1) (Version: - Arturia) minimoog V2 2.0 (HKLM-x32\...\minimoog V2_is1) (Version: - Arturia) Miroslav Philharmonik (HKLM-x32\...\{BA0D0121-A3BA-487D-9C78-7AB0E676C722}) (Version: 1.1.2 - IK Multimedia) Modular V 2.6.3 (HKLM-x32\...\MMV_2.6.0_is1) (Version: 2.6.3 - Arturia) Moog Modular V 2.5 (HKLM-x32\...\Moog Modular V 2_is1) (Version: - Arturia) Movavi Screen Capture Studio 4 (HKLM-x32\...\Movavi Screen Capture Studio 4) (Version: 4.3.3 - MOVAVI) Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) mp3-2-wav converter 1.14 (HKLM-x32\...\mp3-2-wav) (Version: - ) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MusicLab RealGuitar (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (HKLM-x32\...\{4c7ab715-e30c-4db5-ae25-da050dd80533}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealGuitar Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (HKLM-x32\...\{a55070fb-e9c5-4a41-b693-7f439a4d02cc}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealLPC Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (HKLM-x32\...\{85520ea4-3eee-4096-89b7-6df88a92032e}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealStrat Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab Virtual Midi Driver (64-bit) (HKLM\...\{2B019162-86C7-4D14-AED0-2CB5110BA4FF}) (Version: 2.0.2.0 - MusicLab, Inc.) Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 60s Drums (HKLM-x32\...\Native Instruments Abbey Road 60s Drums) (Version: - Native Instruments) Native Instruments Abbey Road 60s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 60s Drums 1.1) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drums (HKLM-x32\...\Native Instruments Abbey Road 70s Drums) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 70s Drums 1.1) (Version: - Native Instruments) Native Instruments Abbey Road Modern Drums (HKLM-x32\...\Native Instruments Abbey Road Modern Drums) (Version: - Native Instruments) Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments) Native Instruments Battery 3 (HKLM-x32\...\Native Instruments Battery 3) (Version: - Native Instruments) Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments) Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.0.1.288 - Native Instruments) Native Instruments DrumMicA (HKLM-x32\...\Native Instruments DrumMicA) (Version: - Native Instruments) Native Instruments Elektrik Piano (HKLM-x32\...\Native Instruments Elektrik Piano) (Version: - ) Native Instruments Elektrik Piano 1.5 (HKLM-x32\...\Native Instruments Elektrik Piano 1.5) (Version: - ) Native Instruments Guitar Rig 3 (HKLM-x32\...\Native Instruments Guitar Rig 3) (Version: - Native Instruments) Native Instruments Guitar Rig 4 (HKLM-x32\...\Native Instruments Guitar Rig 4) (Version: - Native Instruments) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.4.2.245 - Native Instruments) Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.1.0.6 - Native Instruments) Native Instruments Replika (HKLM-x32\...\Native Instruments Replika) (Version: 1.2.0.699 - Native Instruments) Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments) Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: - Native Instruments) Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: - Native Instruments) Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments) Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: - Native Instruments) Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: - Native Instruments) Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: - Native Instruments) Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments) Nero 10 ClipartPack (HKLM-x32\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.6.10000.11.0 - Nero AG) Nero 10 Kwik Themes 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.6.10000.1.0 - Nero AG) Nero 10 Kwik Themes 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.6.10000.2.0 - Nero AG) Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.6.10000.0.0 - Nero AG) Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.6.10000.0.0 - Nero AG) Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.6.10000.1.0 - Nero AG) Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.6.10000.11.0 - Nero AG) Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.6.10000.11.0 - Nero AG) Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.10600.6.100 - Nero AG) Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10700.5.100 - Nero AG) Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.4.10400.2.100 - Nero AG) Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10600.4.100 - Nero AG) Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG) Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10800.6.100 - Nero AG) Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10300.1.100 - Nero AG) Nero Kwik Media (HKLM-x32\...\{1F7D9F37-C39C-486C-BDF8-8F440FFB3352}) (Version: 1.6.16600.75.100 - Nero AG) Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.11200 - Nero AG) Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.10.10700.5.100 - Nero AG) Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG) Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.10.10500.4.100 - Nero AG) Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10500.3.100 - Nero AG) Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.4.11000.9.100 - Nero AG) Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.10.10700.6.100 - Nero AG) NF VST 64-bit Installer (HKLM-x32\...\NF VST 64-bit Installer3.0) (Version: 3.0 - Nomad Factory) Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon) Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.7.0 - Nikon) NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation) NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9745 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation) ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE) PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) PACE License Support Win64 (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) Hidden PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.12 - Nikon) Plus Pack für Acronis True Image Home 2012 (HKLM-x32\...\{A8EFC6C1-DF0C-4F51-8779-EAC4CDB440A4}) (Version: 15.0.6131 - Acronis) Prophet-V2 2.5.3 (HKLM-x32\...\prophetv2_5_is1) (Version: 2.5.3 - Arturia) PSP VintageMeter 32bit (HKLM-x32\...\PSP VintageMeter 32bit) (Version: 1.0.0 32bit - PSPaudioware.com) PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6554 - Realtek Semiconductor Corp.) ReValver HPSE x64 (HKLM\...\ReValver HPSE x64_is1) (Version: - ) Roots Sticks MIDI (HKLM-x32\...\{0EEAD139-1ABB-43B9-BBA1-5ECF9C6CCF8B}) (Version: 1.0.0 - Toontrack) SampleMoog (HKLM-x32\...\{218AA20E-F016-4385-9F74-04FF8E596FB2}) (Version: 1.0.2 - IK Multimedia) SampleTank 2 (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.4 - IK Multimedia) SampleTank 3 version 3.3.0 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.3.0 - IK Multimedia) Sentinel Protection Installer 7.4.0 (HKLM-x32\...\{5A180ED5-0AC1-410A-B790-5E0319CD0A93}) (Version: 7.4.0 - SafeNet, Inc.) SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden Softube Plug-Ins (VST 32-bit) (HKLM-x32\...\Softube Plug-Ins (VST 32-bit)) (Version: - ) Softube Plug-Ins (VST 64-bit) (HKLM\...\Softube Plug-Ins (VST 64-bit)) (Version: - ) Softube Plug-Ins (VST AAX 64-bit) (HKLM\...\Softube Plug-Ins (VST AAX 64-bit)) (Version: - ) SONiVOX Vocalizer (HKLM-x32\...\SONiVOX Vocalizer_is1) (Version: - ) Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit)_is1) (Version: 1.0.0 - Sonnox Ltd, Oxford, UK) Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit)_is1) (Version: 1.0.2 - Sonnox Ltd, Oxford, UK) Spark Vintage Drum Machines 1.7.2 (HKLM-x32\...\Spark Vintage Drum Machines_is1) (Version: - Arturia) SPL TwinTube 1.3.1 (HKLM-x32\...\SPL TwinTube_is1) (Version: - SPL) SPL Vitalizer MK2-T 1.3 (HKLM-x32\...\SPL Vitalizer MK2-T_is1) (Version: - SPL) Splashtop Connect for Firefox (HKLM-x32\...\{EF25F71D-F3E8-42A3-8B5A-DBF83C4B942F}) (Version: 2.0.5.2 - Splashtop Inc.) Splashtop Connect for IE (HKLM-x32\...\{E2B086BD-75A9-45D1-A675-151624B259A1}) (Version: 2.0.5.1 - Splashtop Inc.) SSD Sampler (HKLM-x32\...\SSD4) (Version: 1.1 - Yellow Matter Entertainment) StartUpProject (HKLM-x32\...\{4ABFED1A-0DE9-4864-A89F-1117DECFF672}) (Version: 3.5.0 - Avid Technology, Inc.) Steinberg CC121 Extension 64bit (HKLM-x32\...\{1D111953-3C70-48E3-BB62-B669C724585C}) (Version: 1.7.1 - Yamaha Corporation) Steinberg Cubase 7.5 64bit (HKLM\...\{C75E8AD9-C89F-4505-5E87-CFCCEBE284FA}) (Version: 7.5.20 - Steinberg Media Technologies GmbH) Steinberg Cubase 8 64bit (HKLM\...\{C806BE81-01DE-4EFA-33AC-34635B3EAB4A}) (Version: 8.0.5 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH) Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.2 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.1.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Acoustic Agent (HKLM-x32\...\{F34EA13C-F078-4003-AE21-43EAB2680EC5}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.2.0 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.2 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne 64bit (HKLM\...\{743C5D75-6BC8-4881-BF7D-E7DF29F155F4}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Additional Content Set 01 (HKLM-x32\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH) Steinberg HALionOne Expression Set (HKLM-x32\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Drum Set (HKLM-x32\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Set (HKLM-x32\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Pro Set (HKLM-x32\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Drum Set (HKLM-x32\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Set (HKLM-x32\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg UR44 Applications (HKLM-x32\...\InstallShield_{37619421-E7D8-44C2-85A3-486C97E6A0D4}) (Version: 2.1.0 - Yamaha Corporation) Steinberg UR44 Applications (Version: 2.1.0 - Yamaha Corporation) Hidden Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg VST Bass Amp Content (HKLM-x32\...\{A2FC1750-B90F-4948-9D6E-DDDA155C6EC8}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg VST Classics 1 64bit (HKLM\...\{AA322103-FC2B-4D86-BA6C-67D4DDB4209C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg VST Classics 2 64bit (HKLM\...\{AC07B5F9-BF11-4221-9E85-87A6F33BCBB3}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Stutter Edit Expansion 1 (HKLM-x32\...\Stutter Edit Expansion 1_is1) (Version: 1.00 - iZotope, Inc.) Stutter Edit Expansion 2 (HKLM-x32\...\Stutter Edit Expansion 2_is1) (Version: 1.00 - iZotope, Inc.) Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - ) Superior Drummer 32-bit (HKLM-x32\...\{009AC76E-1A66-4682-82B7-417E77F3C648}) (Version: 2.4.0 - Toontrack) Superior Drummer 64-bit (HKLM\...\{22029AEE-38DF-4E35-AEF4-FE8CA3F6667F}) (Version: 2.4.0 - Toontrack) Toontrack solo (HKLM-x32\...\{5866520C-8857-4986-833A-039F4584C3F7}) (Version: 1.3.2 - Toontrack) Toontrack solo 64 bit (HKLM\...\{FA9D0D8C-FDD1-45C2-8291-079FBA72D2CB}) (Version: 1.3.2 - Toontrack) T-RackS 1.x (HKLM-x32\...\{37BCCAE2-A3AD-4E03-B4FD-A1BE1FE6365A}) (Version: 1.3.0 - IK Multimedia) T-RackS 3 Standard (HKLM-x32\...\{A78D0A87-8C6E-4726-84D7-C4CAC122617D}) (Version: 3.1.1 - IK Multimedia) T-RackS CS version 4.7.1 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.7.1 - IK Multimedia) UAD Powered Plug-Ins (HKLM-x32\...\UAD Powered Plug-Ins) (Version: - ) Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - ) Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.6 - Ulead Systems, Inc.) Ulead PhotoImpact 11 (HKLM-x32\...\{C8550C86-A712-4219-AD4C-038C9FD1D149}) (Version: 11.0 - Ulead System) UninstallTpkdx64 (HKLM\...\Tpkdx64_is1) (Version: - ) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Vienna Instruments 2.0 (HKLM\...\Vienna Instruments_is1) (Version: - Vienna Symphonic Library) Vienna Instruments Software 1.11 (HKLM-x32\...\Vienna Instruments Software_is1) (Version: - Vienna Symphonic Library) ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.7.6 - Nikon) Vir2 Instruments Acoustic Legends HD (HKLM-x32\...\Vir2 Instruments Acoustic Legends HD) (Version: - ) Vir2 Instruments BASiS (HKLM-x32\...\Vir2 Instruments BASiS) (Version: - ) Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}) (Version: 1.00.0000 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) VKFX 2.2.5 (HKLM\...\{C270463E-8DF0-45c7-AB1F-2695E822E344}_is1) (Version: 2.2.5 - Overloud) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) WAV to AC3 Encoder 5.0 (HKLM-x32\...\WAV to AC3 Encoder_is1) (Version: - Wieslaw Soltes) WaveLab 8 (64 bit) (HKLM\...\WaveLabPro8_64) (Version: 8.0.0.658 - Steinberg) WaveLab 8.5 (64 bit) (HKLM\...\WaveLabPro8_5_64) (Version: 8.5.0.849 - Steinberg) Waves Complete V9r21 (HKLM-x32\...\{93000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.3.21 - Waves) Wavpack4Wavelab6 (HKLM-x32\...\{D2CB5A07-DF85-4CFD-8E76-EB23B77730F3}) (Version: 1.0.0 - RIL) Windows Driver Package - Universal Audio Inc. (UAD2Pcie) UAD2DSP (11/30/2010 ) (HKLM\...\D6464B370822574865708071F3E87D186FAC7BA4) (Version: 11/30/2010 - Universal Audio Inc.) Windows Driver Package - Universal Audio Inc. (UAD2System) UAD2DSP (11/30/2010 ) (HKLM\...\072DA3D1AC97714EA927A1A5770099D1AB131FD5) (Version: 11/30/2010 - Universal Audio Inc.) WinRAR 4.10 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH) Wurlitzer V 1.0.6 (HKLM-x32\...\Wurlitzer V_is1) (Version: - Arturia) XLN Online Installer (HKLM\...\XLN Online Installer Inno Setup ID_is1) (Version: - ) XLN Online Installer (HKLM\...\XLN Online Installer) (Version: - XLN Audio AB) Yamaha Steinberg USB Driver (HKLM-x32\...\InstallShield_{89A4C956-539C-438D-8D3B-B9C054FD0DDE}) (Version: 1.8.5 - Yamaha Corporation) Yamaha Steinberg USB Driver (Version: 1.8.5 - Yamaha Corporation) Hidden Yamaha USB-MIDI Driver (HKLM-x32\...\InstallShield_{18369253-E53F-4A47-818E-082DFB950872}) (Version: 3.1.2.1 - Yamaha Corporation) Yamaha USB-MIDI Driver (Version: 3.1.2.1 - Yamaha Corporation) Hidden yellow tools Independence Pro 2.5.4 Software Suite 64bit (HKLM-x32\...\yellow tools Independence Pro 2.5.4 Software Suite 64bit) (Version: - ) Zero-G Vocal Forge (HKLM-x32\...\Zero-G Vocal Forge) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{CE4DC330-BD45-4D58-89D8-213C0487778D}\InprocServer32 -> C:\Program Files\MusicLab\RealStrat 3\RealStratView.dll () CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{FEEC32C4-894D-4B59-B6ED-8AC7B1C84295}\InprocServer32 -> C:\Program Files\MusicLab\RealGuitar 3\RealGuitarView.dll () ==================== Restore Points ========================= 20-09-2014 12:01:51 Installiert Yamaha Steinberg USB Driver 20-09-2014 12:03:24 Installiert Steinberg UR44 Applications 24-09-2014 14:58:30 Windows Update 25-09-2014 14:00:22 Installed Waves MultiRack Native and SoundGrid V9r15 02-10-2014 11:09:40 Windows Update 07-10-2014 11:39:13 Windows Update 08-10-2014 12:06:16 Removed Waves MultiRack Native and SoundGrid V9r15 08-10-2014 12:26:52 Removed Waves Complete V9r18 08-10-2014 12:28:19 Installed Waves Complete V9r21 08-10-2014 12:48:13 Installed Waves MultiRack Native and SoundGrid V9r15 08-10-2014 13:04:31 Installed Waves Complete V9r21 08-10-2014 13:16:45 Installed Waves Complete V9r21 08-10-2014 15:05:45 Installed Waves Complete V9r21 08-10-2014 15:36:30 Installed Waves Complete V9r21 08-10-2014 15:45:41 Removed Waves Complete V9r21 08-10-2014 15:48:39 Removed Waves MultiRack Native and SoundGrid V9r15 08-10-2014 15:53:19 Installed Waves Complete V9r21 08-10-2014 16:25:34 Installed Waves Complete V9r21 08-10-2014 16:56:27 Removed Waves Complete V9r21 08-10-2014 18:12:08 Installed Waves Complete V9r21 08-10-2014 18:21:06 Installed Waves Complete V9r21 08-10-2014 19:22:14 Wiederherstellungsvorgang 08-10-2014 19:35:43 Installed Waves Complete V9r21 09-10-2014 15:16:07 Configured Waves Complete V9r21 10-10-2014 12:21:46 Removed Steinberg Cubase 6 64bit 10-10-2014 13:01:03 Windows Update 14-10-2014 12:02:48 Windows Update 16-10-2014 11:31:16 Windows Update 16-10-2014 15:06:14 Windows Update 19-10-2014 13:18:39 Installed Java 7 Update 71 22-10-2014 12:22:33 Windows Update 28-10-2014 09:30:12 Windows Update 28-10-2014 13:13:20 MusicLab RealGuitar 28-10-2014 13:14:28 Gerätetreiber-Paketinstallation: MusicLab,Inc. Audio-, Video- und Gamecontroller 28-10-2014 13:16:39 MusicLab RealLPC 28-10-2014 13:18:35 MusicLab RealStrat 01-11-2014 13:48:03 Windows Update 08-11-2014 11:46:01 Windows Update 22-11-2014 13:22:50 Windows Update 06-12-2014 14:04:32 Configured PACE License Support Win64 13-12-2014 11:41:20 Windows Update 03-01-2015 12:56:20 Windows Update 03-01-2015 15:56:19 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 03-01-2015 15:56:50 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 03-01-2015 16:08:25 Configured iLok Client Helper 03-01-2015 16:10:52 Removed PACE License Support Win64 03-01-2015 16:20:09 Installed PACE License Support Win64 03-01-2015 16:50:55 Configured PACE License Support Win64 03-01-2015 17:37:32 Removed Steinberg Cubase 7 64bit 03-01-2015 19:50:15 Installed EZkeys Classic Electrics 64. 03-01-2015 22:11:46 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 03-01-2015 22:12:30 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 04-01-2015 16:45:43 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 04-01-2015 16:46:45 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2015-01-04 12:41 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1061FDDF-FD38-4434-923F-B01E4FE9EA0B} - System32\Tasks\{29175965-F787-4528-B3C8-F57146EBD8E8} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {142BD87F-4E9D-4DD7-BD37-30E762B767FB} - System32\Tasks\{85839F60-C55D-4A03-ADA4-CFBFF70913F4} => pcalua.exe -a "C:\Users\xxxxx\Downloads\Waves_Complete_V9r18.exe" -d "C:\Users\xxxxx\Downloads" Task: {19ABA4F3-17E6-4F42-AB05-A96F73B41FA8} - System32\Tasks\{BB11460A-50B3-494F-9819-514E591A0F96} => pcalua.exe -a Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe -d Q:\Downloads\Tascam\FW-1082_DR_Win_v170 Task: {19FE1324-E749-4E42-AF49-7C829D936723} - System32\Tasks\{DA2C2281-7022-46CA-9B16-D35E131E183B} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {1DD7E5BB-F8FF-4979-AB40-75A0ACE435F4} - System32\Tasks\{29DBEDF4-CF87-46A4-B759-506861DE03D9} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {1E879F1F-9418-45B8-A47C-1E96C550DA07} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {23F870EA-19D1-47A4-88EA-D94C1A6C1ECF} - System32\Tasks\{4866F09B-B790-40EA-BF5E-BECC5DA41AE1} => C:\Users\xxxxx\Downloads\Waves_Complete_V9r18.exe [2014-10-08] () Task: {24235CED-6D6E-4576-8077-0B7DE26822E1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {26AEF134-8686-4622-ACE9-13CD77C4229F} - System32\Tasks\{CD71D5AF-98B4-41C1-ABF5-E88C19526654} => pcalua.exe -a Q:\Downloads\Steinberg\WaveLabAspi.exe -d Q:\Downloads\Steinberg Task: {26B0B279-DF8C-4CFE-9069-73402524C30C} - System32\Tasks\{ADB300C0-352F-4357-89B4-6DD70CC70B1B} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {298B857C-0B65-4FF1-974A-56F1C6FA985C} - System32\Tasks\{438F3EF0-DDAA-4675-A999-E7A0FD922E27} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {29948ADB-C48B-4D26-928D-AB21C21FAFE0} - System32\Tasks\{40D901C2-504F-4FFA-B15A-16A9F99DEB99} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {29FB761E-3D1C-4660-9107-8982B85C70AE} - System32\Tasks\{412B8675-D7A0-4674-AD88-F0B1B16B8122} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {2DF5DD56-FBEA-49CD-9443-9D46DEEEF944} - System32\Tasks\{D1C71F96-9AAB-4054-87C3-8673B64EA10B} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {322F7B8A-43DE-4669-8405-F9FEE4815575} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {3D5576D7-F137-456F-ACF7-4E6951BCAAAE} - System32\Tasks\{5F9DF423-7D3C-427E-81DF-1C0A3089E864} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {45D8E408-144E-40D2-9CC8-945D0CC76826} - System32\Tasks\{B7775B54-F6E5-4832-B4BE-E877DE2F3B45} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {4BAC4AD4-0AFA-4599-BF47-E4110BB1E66E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {5D8AAF0F-B35F-44DF-940F-949DD8FB752C} - System32\Tasks\{81C7480D-65DF-4F3C-ADE7-3B3D3A21A13A} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {67A2DD0A-7E44-4505-9669-67B017F40EEE} - System32\Tasks\{626B8230-16CC-48CF-A490-58CEED8E21A8} => pcalua.exe -a "C:\Users\xxxxx\Desktop\Kontakt 4 Factory Content Setup PC.exe" -d "C:\Users\xxxxx\Desktop" Task: {6B31B445-731D-4169-8747-370AC6CE856E} - System32\Tasks\{2AD3E5CD-846C-454C-8F5E-66F9BD146432} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {78468091-1F8B-4889-88B6-09283C587F7A} - System32\Tasks\{5746D425-FB45-49FB-89AC-6D718D8AAB96} => pcalua.exe -a H:\setup.exe -d H:\ Task: {7ABB794D-4402-4F4B-AAE6-A683947D3A5F} - System32\Tasks\{2CBFBC4B-2D9E-4357-AF11-0F0709DF2A74} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {83BF8E31-F091-46C7-90E7-5ABBACBBFB90} - System32\Tasks\{4898AA0A-DFAB-4D6E-90A0-A8B280D99E75} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {894932C1-A298-4A4C-BCDD-E4BA7387C27F} - System32\Tasks\AdobeAAMUpdater-1.0-xxxxx-PC-xxxxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-05-16] (Adobe Systems Incorporated) Task: {95398875-A3E3-45A8-A3A4-1F8424E8D14C} - System32\Tasks\{BFAD21FD-87DD-4D57-8435-CAF757D6A11F} => pcalua.exe -a H:\windows\german\pm\personal\Setup.exe -d H:\windows\german\pm\personal Task: {9C84F1F2-3512-4CE1-A371-B703568C1E31} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {A3B740FE-B024-42AE-8090-69BF33EA3B3A} - System32\Tasks\{5853299B-4259-442D-85A5-8CC6580067B3} => C:\Users\xxxxxW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {ABA56809-A401-4F32-874C-F1A51A3589C4} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {ABE5DB4C-EC69-4E54-A15A-A495205ACB52} - System32\Tasks\{B76EAEE9-550E-4B96-99EA-F859C946EBCA} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {ABECAB4D-8FF9-45AF-A0D9-51D2A67D355F} - System32\Tasks\{C8AE0818-88F1-4A18-A57B-B441BE68ECA4} => pcalua.exe -a "D:\Retro ADpak Installer.exe" -d D:\ Task: {B076D6CE-39BD-4472-985B-7919F96AAB82} - System32\Tasks\{7C16986C-0877-491D-ABB6-88470C77EE5B} => pcalua.exe -a "G:\Downloads\Universal Audio\UAD-Win-v580.exe" -d "G:\Downloads\Universal Audio" Task: {B4148331-B027-4713-AE36-D5E9929070D7} - System32\Tasks\{51E7D79B-2CAA-4FFC-ABD0-363FA9548361} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {BA31E6FA-43E9-4DD4-9608-A8C89C69160B} - System32\Tasks\{D1FC40E7-6029-4CC3-A406-CD8EBE42631A} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {BA347F6F-00F2-472A-AF65-19A3D1DFB2A3} - System32\Tasks\{06423D2D-E9C1-4F33-B81A-82C715621358} => pcalua.exe -a "H:\Alicias Keys Setup PC.exe" -d H:\ Task: {BC37EC53-D032-424F-A403-D85B9824E3F9} - System32\Tasks\{B04DD4E4-4CDD-43D9-8750-AF953E20A112} => pcalua.exe -a "O:\Program Files (x86)\VSL\Vienna Instruments\LibraryInstaller.exe" -d "O:\Program Files (x86)\VSL\Vienna Instruments" Task: {BD10712F-BDCC-40A6-9840-FF84C52BE6FD} - System32\Tasks\{2C46918F-A593-4956-88DE-8F999A59AE9C} => pcalua.exe -a "H:\Independence Pro 2.5.4 Software Suite 64 E-License.exe" -d H:\ Task: {BF7ABB10-6A68-409E-8008-EB534F8F8705} - System32\Tasks\{D398A544-CFB3-46E8-B5DF-626FF232C43B} => pcalua.exe -a "C:\Users\xxxxx\Downloads\install_flash_player.exe" -d "C:\Users\xxxxx\Downloads" Task: {C18139FF-A0AB-4047-8DDD-39525E452E10} - System32\Tasks\{6904D156-3764-4007-AEC4-9544A7DA37E0} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {C37AE386-CBA9-43AE-9844-B2CE7224BE33} - System32\Tasks\{1D409CDB-4184-4914-A0E6-97AD74AC8C6D} => H:\windows\german\pm\personal\Setup.exe Task: {C58B58B4-3DE9-45F0-9B11-850C7FDD27B0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-10] (Adobe Systems Incorporated) Task: {C667DE3E-8FA6-443B-9CCC-7B757AB7C2C4} - System32\Tasks\{85AF413A-1425-4DA2-BFA3-8E5B4A8E3B8B} => pcalua.exe -a "D:\Cubase 7 for Windows\Setup.exe" -d "D:\Cubase 7 for Windows" Task: {C73A72CF-5138-48BE-BF08-78546B184472} - System32\Tasks\{0BCE0B9C-45A2-40B0-9941-9F39BDACB669} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {C92F3D73-0DF8-4A42-8396-F321B5E87D9A} - System32\Tasks\{EFB4A033-2F63-4013-82D3-FEDE6E7A8D55} => C:\Windows\System32\SoftLcd1082.exe Task: {CA870B03-DCDD-48C0-98C2-D714511B21F1} - System32\Tasks\{C14BF85D-4129-4CE4-AD72-D630D327CC26} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {D0CB62B8-3961-4DED-AC91-4AE23D264B6B} - System32\Tasks\{9B31F731-5050-4586-98EF-74A01C60D886} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {D401F2A2-731E-4682-BF5A-9AC9585DE606} - System32\Tasks\{674EA2D3-4F3C-4EA3-8749-2D08682045A0} => pcalua.exe -a "C:\Users\xxxxx\Downloads\DriverSetup.exe" -d "C:\Users\xxxxx\Downloads" Task: {D57D1B7C-1831-4FAD-BF64-203A05D8D136} - System32\Tasks\{E6A7A111-7169-4964-9496-AA39C0C5D697} => pcalua.exe -a H:\Autorun.exe -d H:\ Task: {DF1EB108-2A31-441E-971D-1CD931F8A30E} - System32\Tasks\{C4C278E8-DFDC-4D88-A004-A03664E2C937} => C:\Program Files\Steinberg\Asio\asioglldsetup.exe [2010-12-06] (Steinberg Media Technologies) Task: {E2AD9959-656C-4596-9ABE-C3AB27091F0E} - System32\Tasks\{E3C7FEEC-A48E-4A6B-8D20-9CDC54920125} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {E618B9A0-0D06-45B0-BCFA-BF36790B1C72} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {E9E16472-D60C-48EA-B60E-E2548DF10B2B} - System32\Tasks\{B74E7334-75CB-455D-8C95-F754C20EBF68} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {EB90BB02-A30C-4C16-A089-2811D2AA2EB7} - System32\Tasks\{665362E6-1AD6-479D-ABD8-BCF17AE72325} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {F2D8BAA3-CBCA-4E56-B0D4-0E6B5B601F6E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft) Task: {FD61B29E-C3EA-4605-9193-7EF307CC5001} - System32\Tasks\{B6B539BF-11D3-4E9C-BB34-34F0B21FCC70} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {FF6AC220-F9ED-43A6-A526-138A6488B389} - System32\Tasks\{8F48DE62-F226-4564-A004-BC06D47FE024} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-08-11 13:11 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-06-13 00:10 - 2010-01-19 03:31 - 00072304 _____ () C:\Windows\SysWOW64\XSrvSetup.exe 2014-08-30 17:12 - 2014-08-30 17:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll 2012-04-27 17:33 - 2012-04-27 17:33 - 00435552 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ulxmlrpcpp.dll 2012-06-13 00:09 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2015-01-03 14:13 - 2015-01-03 14:13 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00459048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00587048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00332584 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com\nponlinebanking.dll 2012-04-27 21:21 - 2012-04-27 21:21 - 13005104 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ti_managers.dll 2012-04-27 18:09 - 2012-04-27 18:09 - 00018784 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Program Files\Common Files\System:bkJR4Q5ekubuEytkHOHN9FDldZk AlternateDataStreams: C:\ProgramData\Microsoft:0JpKqUFDcPdEORJ8qNFp8w AlternateDataStreams: C:\ProgramData\Microsoft:5hYrtYXv4RFuvoGmPrGD2NLHTREw AlternateDataStreams: C:\ProgramData\Microsoft:5KfNWpWNPX1wbFxFO3E9ImnmfLp AlternateDataStreams: C:\ProgramData\Microsoft:9kl92Sfgv9VOx5y487Gb AlternateDataStreams: C:\ProgramData\Microsoft:e6QV9RBqH5tBpkOJ825uc44 AlternateDataStreams: C:\ProgramData\Microsoft:EmZUO1ghceEFEfgohiyQTSr AlternateDataStreams: C:\ProgramData\Microsoft:FIzD2p7hRpzMsiWzLU4FWAu4DG2Y AlternateDataStreams: C:\ProgramData\Microsoft:gEDtHGZl5VBhyUDsChb AlternateDataStreams: C:\ProgramData\Microsoft:iBRVEzFW1llEoLZcS3VLEeVCW AlternateDataStreams: C:\ProgramData\Microsoft:JFbsLoAG7ylh6FO5F5B AlternateDataStreams: C:\ProgramData\Microsoft:lJgRnpcsZyHzZ9RcWOe669vqjX AlternateDataStreams: C:\ProgramData\Microsoft:mzLKEwry2nZIbRjOEIHNQyz AlternateDataStreams: C:\ProgramData\Microsoft:P2kNTjY7GAAENqAnpY AlternateDataStreams: C:\ProgramData\Microsoft:PbjOONTVgtPL20OMMjQAGQFm AlternateDataStreams: C:\ProgramData\Microsoft:pyWUynYKzFVcmjsLti7Jn2f AlternateDataStreams: C:\ProgramData\Microsoft:qpD21ezWETolKR7zxZN132 AlternateDataStreams: C:\ProgramData\Microsoft:rTbZl3fuV0KA1SBvenaKkXxQGQGGNo AlternateDataStreams: C:\ProgramData\Microsoft:u8EGYeTR5GuwkeSSaotMc8NQ1BG3Tt AlternateDataStreams: C:\ProgramData\Microsoft:V7JFxnYuTdgxFTad71b7riK9u2 AlternateDataStreams: C:\Users\xxxxx\Cookies:0HxNukw9hQPeAlOyhj AlternateDataStreams: C:\Users\xxxxx\Cookies:2sTxxI2AoieXEXStwlc AlternateDataStreams: C:\Users\xxxxx\Cookies:fqAY3vHSNIV8wb0vtZQlu58L1sO AlternateDataStreams: C:\Users\xxxxx\Cookies:maNpXg26EfLhAYLVCg5bm9NQ AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\AppData\Local:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\AppData\Local:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\AppData\Local:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\AppData\Local:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\AppData\Local:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:EkLl8viNdpZaDt5BtyibJZWv AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:O3Gupa96puwZsDBndwL AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:SulGbcoM5k5htOkrT6oFYFHf AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:ughxnTcu7B6kj3rj AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:VTgSC9p3AXvhXEs6X1UKGxWVvAyMr AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:0L9d5Wklr9wAn9cdrskJuAF6 AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:fhI0qFS4NI538e7huuTv8eRfF AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:xe6TJQ53vIYg0hq1z2ARUrHBzOpe ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" MSCONFIG\startupreg: AcronisTimounterMonitor => C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: DigidesignMMERefresh => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: StartFw1082Panel => fw1082panel.exe H MSCONFIG\startupreg: STCAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe MSCONFIG\startupreg: ZyngaGamesAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" ========================= Accounts: ========================== 28D925BEF4154602B49E (S-1-5-21-25170337-1842596019-2157349911-1005 - Limited - Enabled) Administrator (S-1-5-21-25170337-1842596019-2157349911-500 - Administrator - Disabled) E14ACD8B9526477D8048 (S-1-5-21-25170337-1842596019-2157349911-1003 - Limited - Enabled) Gast (S-1-5-21-25170337-1842596019-2157349911-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-25170337-1842596019-2157349911-1008 - Limited - Enabled) xxxxx (S-1-5-21-25170337-1842596019-2157349911-1000 - Administrator - Enabled) => C:\Users\xxxxx ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/10/2015 03:59:56 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x1e4c Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 03:59:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x1f54 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 03:59:49 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x138c Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 03:40:26 PM) (Source: SideBySide) (EventID: 63) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (01/10/2015 03:39:18 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"2" in Zeile WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0". Definition: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (01/10/2015 02:30:50 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/10/2015 11:52:05 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"2" in Zeile WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0". Definition: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (01/10/2015 11:21:05 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (01/10/2015 11:21:05 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (01/10/2015 11:21:05 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. System errors: ============= Error: (01/10/2015 04:02:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 04:01:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 04:01:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (01/10/2015 04:01:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/10/2015 04:01:35 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cvintdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (01/10/2015 10:36:16 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 10:35:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 10:35:44 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (01/10/2015 10:35:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/10/2015 10:35:44 AM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cvintdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2015-01-04 12:35:45.929 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2015-01-04 12:35:45.902 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:25.747 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:25.716 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:23.173 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:23.157 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Percentage of memory in use: 15% Total physical RAM: 16346.31 MB Available physical RAM: 13797.37 MB Total Pagefile: 32690.8 MB Available Pagefile: 29674.53 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: (Win7 System) (Fixed) (Total:467.64 GB) (Free:129.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: (Lokales Laufwerk ) (Fixed) (Total:99.82 GB) (Free:79.72 GB) NTFS Drive f: (W7 Cubase/WaveLab) (Fixed) (Total:467.64 GB) (Free:358.88 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive g: (W7 Adobe/Daten/Sonstiges) (Fixed) (Total:463.87 GB) (Free:263.32 GB) NTFS Drive i: (Plug Ins 2) (Fixed) (Total:463.87 GB) (Free:110.78 GB) NTFS Drive k: (Lokales Laufwerk) (Fixed) (Total:123.68 GB) (Free:58.67 GB) NTFS Drive o: (W7 Plug Ins) (Fixed) (Total:708.01 GB) (Free:348.29 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B0C5A5B3) Partition 1: (Active) - (Size=467.6 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1A679F39) Partition 1: (Not Active) - (Size=123.7 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=708 GB) - (Type=07 NTFS) Partition 3: (Active) - (Size=99.8 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 88618861) Partition 1: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS) Partition 2: (Active) - (Size=467.6 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Gruss und |
10.01.2015, 17:52 | #23 |
/// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Nicht normal. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897 Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Nochmal ein frisches FRST Log. Ich glaube dein Benutzerkonto hat nen Macken.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.01.2015, 22:32 | #24 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss So, und weiter gehts. Fixlog: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-01-2015 Ran by xxxxx at 2015-01-10 22:06:47 Run:2 Running from C:\Users\xxxxx\Desktop Loaded Profile: xxxxx (Available profiles: xxxxx) Boot Mode: Normal ============================================== Content of fixlist: ***************** ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897 ***************** HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully. ==== End of Fixlog 22:06:47 ==== FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015 Ran by xxxxx (administrator) on xxxxx-PC on 10-01-2015 22:08:45 Running from C:\Users\xxxxx\Desktop Loaded Profile: xxxxx (Available profiles: xxxxx) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Windows\SysWOW64\XSrvSetup.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-05-16] (Adobe Systems Incorporated) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393616 2011-03-30] (KORG Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] () HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation) HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKU\S-1-5-21-25170337-1842596019-2157349911-1000\...\RunOnce: [Adobe Speed Launcher] => 1420923711 ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\shellex.dll (Kaspersky Lab ZAO) ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\shellex.dll (Kaspersky Lab ZAO) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {1B293868-8F4D-4b37-89CA-75BBD8747680} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {90DC3FD6-1CAD-415a-8ED1-67062890BB03} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms} BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\fu0cgvgf.default FF DefaultSearchUrl: hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF SelectedSearchEngine: Google FF Homepage: hxxp://t-online.de/ FF NetworkProxy: "type", 4 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @ilok.com/iLokHelper,version=3.1.0.7 -> C:\Program Files (x86)\PACE Anti-Piracy\iLok\NPPaceILok.dll ( PACE Anti-Piracy, Inc) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com () FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com () FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com () FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll () FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll () FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2015-01-03] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2015-01-03] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2015-01-03] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010-02-06] FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-01-03] FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com FF Extension: Безпечні платежі - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com [2015-01-03] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [1155072 2008-12-16] (MAGIX AG) [File not signed] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed] S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation) R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] () R2 LanmanWorkstation; C:\Windows\System32\aptwj1dm3.dll [289280 2012-04-21] (Works Ltd.) [File not signed] R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed] R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [5018624 2010-03-25] (Native Instruments GmbH) [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation) S3 PSEXESVC; C:\Windows\PSEXESVC.exe [189792 2015-01-03] (Sysinternals) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] S3 UPnPService; C:\Program Files (x86)\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG) [File not signed] S2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe -s [X] S2 TryAndDecideService; "C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] () R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch) S2 cvintdrv; C:\Windows\SysWow64\Drivers\cvintdrv.sys [7140 2003-07-29] () [File not signed] S3 Fw1082; C:\Windows\System32\Drivers\Fw1082x64.sys [228864 2010-03-03] (TASCAM) S3 Fw1082WdmService; C:\Windows\System32\Drivers\FW1082Wdmx64.sys [70144 2010-03-16] (TASCAM) S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-01-04] () R3 hypaudio; C:\Windows\System32\DRIVERS\hypaudio64.sys [1484800 2010-11-30] (Universal Audio, Inc.) R3 hypkern; C:\Windows\System32\drivers\hypkern64.sys [225792 2010-11-30] () R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-04-11] () R3 iLokDrvr; C:\Windows\SysWOW64\DRIVERS\iLokDrvr.sys [54328 2009-12-02] (PACE Anti-Piracy, Inc.) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-01-03] (Kaspersky Lab ZAO) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [818888 2015-01-03] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-01-03] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO) R3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [33656 2011-03-30] (KORG INC.) S3 MADFUFTU; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra_DFU.sys [45832 2009-09-25] (M-Audio) S3 MAUSBFASTTRACKULTRA; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra.sys [180496 2013-06-18] (M-Audio) R3 mlkumidi; C:\Windows\System32\drivers\mlkumidi.sys [55856 2014-08-30] (MusicLab, Inc.) R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [111696 2012-01-21] () R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 paeusbaudio; C:\Windows\System32\DRIVERS\paeusbaudio_x64.sys [252280 2012-05-24] () S3 paeusbaudiodsp; C:\Windows\System32\DRIVERS\paeusbaudiodsp_x64.sys [71544 2012-05-24] () S3 paeusbaudioks; C:\Windows\System32\DRIVERS\paeusbaudioks_x64.sys [53112 2012-05-24] () S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] () S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [25504 2013-10-21] (Resplendence Software Projects Sp.) S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [142120 2007-04-27] (SafeNet, Inc.) R3 SynUSB64; C:\Windows\System32\DRIVERS\SynUSB64.sys [30352 2009-06-26] (Steinberg Media Technologies GmbH) R0 Tpkd; C:\Windows\SysWow64\Drivers\Tpkd.sys [86528 2008-07-02] (PACE Anti-Piracy, Inc.) [File not signed] R3 UAD2System; C:\Windows\System32\DRIVERS\UAD2System.sys [58368 2010-11-30] (Universal Audio Inc.) R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51016 2011-11-01] (Yamaha Corporation) R3 ysusb64; C:\Windows\System32\drivers\ysusb64.sys [132200 2013-12-17] (Yamaha Corporation) S3 BEHRINGER_2902; System32\Drivers\BUSB2902.sys [X] S3 BUSB_AUDIO_WDM; system32\drivers\busbwdm.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 cpuz134; \??\C:\Program Files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys [X] S3 GMSIPCI; \??\H:\INSTALL\GMSIPCI.SYS [X] S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [X] S3 TASCAM_US1800; System32\Drivers\tus1800u.sys [X] S3 TASCAM_US1800_MIDI; system32\drivers\tus1800m.sys [X] S3 TASCAM_US1800_WDM; system32\drivers\tus1800a.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-10 22:08 - 2015-01-10 22:09 - 00022702 _____ () C:\Users\xxxxx\Desktop\FRST.txt 2015-01-10 17:50 - 2015-01-10 17:51 - 00000144 _____ () C:\Windows\SysWOW64\msvcsv60.dll 2015-01-10 17:50 - 2015-01-10 17:51 - 00000096 _____ () C:\Users\xxxxx\AppData\Roaming\msregsvv.dll 2015-01-10 17:13 - 2015-01-10 17:13 - 00000000 ____D () C:\Users\xxxxx\Documents\FXpansion 2015-01-10 14:07 - 2015-01-10 14:07 - 00000931 _____ () C:\Users\Public\Desktop\WaveLab 8.5 (64).lnk 2015-01-10 14:07 - 2015-01-10 14:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaveLab 8.5 (64) 2015-01-10 13:26 - 2015-01-10 13:26 - 17340080 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-01-10 12:25 - 2015-01-10 17:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-10 12:25 - 2015-01-10 13:26 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-10 12:07 - 2015-01-10 12:10 - 34200128 _____ (Steinberg Media Technologies GmbH) C:\Users\xxxxx\Downloads\eLicenserControlSetup.exe 2015-01-10 11:51 - 2015-01-10 11:51 - 00002113 _____ () C:\Users\xxxxx\Desktop\Cubase 8 64bit.lnk 2015-01-10 11:51 - 2015-01-10 11:51 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\VST XMLs 2015-01-10 11:51 - 2015-01-10 11:51 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 8 64bit 2015-01-10 11:48 - 2015-01-10 11:48 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Steinberg Installation Updater 2015-01-10 11:48 - 2015-01-10 11:48 - 00000000 ____D () C:\Users\xxxxx\AppData\Local\Steinberg Installation Updater 2015-01-10 11:15 - 2015-01-10 14:11 - 00000000 ____D () C:\Program Files (x86)\FXpansion 2015-01-10 11:15 - 2015-01-10 13:58 - 00002182 _____ () C:\Users\xxxxx\Desktop\License Manager.lnk 2015-01-10 11:15 - 2015-01-10 13:58 - 00000997 _____ () C:\Users\xxxxx\Desktop\BFD3 (64-bit).lnk 2015-01-10 11:15 - 2015-01-10 11:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FXpansion 2015-01-10 11:15 - 2015-01-10 11:15 - 00000000 ____D () C:\ProgramData\FXpansion 2015-01-10 11:10 - 2015-01-10 17:13 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\FXpansion 2015-01-09 23:58 - 2015-01-09 23:58 - 00852505 _____ () C:\Users\xxxxx\Desktop\SecurityCheck.exe 2015-01-04 16:48 - 2015-01-04 16:48 - 00001070 _____ () C:\Users\Public\Desktop\Service Center.lnk 2015-01-04 16:48 - 2015-01-04 16:48 - 00000000 __HDC () C:\ProgramData\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B} 2015-01-04 16:48 - 2015-01-04 16:48 - 00000000 __HDC () C:\ProgramData\{36047B27-9342-4F25-AB0D-F0DFC71A650A} 2015-01-04 15:56 - 2015-01-10 00:03 - 02124288 _____ (Farbar) C:\Users\xxxxx\Desktop\FRST64.exe 2015-01-04 15:42 - 2015-01-04 15:42 - 00000000 ____D () C:\Windows\ERUNT 2015-01-04 15:28 - 2015-01-04 15:29 - 01707939 _____ (Thisisu) C:\Users\xxxxx\Desktop\JRT.exe 2015-01-04 15:07 - 2015-01-04 15:20 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-04 14:23 - 2015-01-04 14:23 - 00000000 ____D () C:\Users\Public\Documents\NI Resources 2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD 2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD 2015-01-04 13:48 - 2006-05-11 12:30 - 00393216 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_IRC_1_0_3.dll 2015-01-04 13:48 - 2006-05-11 12:30 - 00061440 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_DFD_1_4.dll 2015-01-04 13:34 - 2014-07-02 18:44 - 00609240 _____ () C:\Windows\SysWOW64\nvStreaming.exe 2015-01-04 13:32 - 2014-07-02 21:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-01-04 13:32 - 2014-07-02 21:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-01-04 13:32 - 2014-07-02 21:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-01-04 13:30 - 2015-01-04 13:30 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-01-04 13:30 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-01-04 13:30 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-01-04 13:30 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-01-04 13:26 - 2015-01-04 13:29 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\xxxxx\Downloads\mbam-setup-2.0.4.1028.exe 2015-01-04 12:52 - 2015-01-04 12:52 - 00029411 _____ () C:\ComboFix.txt 2015-01-04 12:27 - 2015-01-04 12:52 - 00000000 ____D () C:\Qoobox 2015-01-04 12:27 - 2015-01-04 12:49 - 00000000 ____D () C:\Windows\erdnt 2015-01-04 12:27 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2015-01-04 12:27 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2015-01-04 12:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2015-01-04 12:27 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2015-01-04 12:22 - 2015-01-04 12:22 - 05609858 ____R (Swearware) C:\Users\xxxxx\Desktop\ComboFix.exe 2015-01-04 12:12 - 2015-01-04 12:12 - 00003402 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-03 22:28 - 2015-01-03 22:28 - 00002314 _____ () C:\Users\xxxxx\Desktop\Sicherer Zahlungsverkehr.lnk 2015-01-03 22:24 - 2015-01-03 22:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security 2015-01-03 22:23 - 2015-01-03 22:23 - 00000000 ___SD () C:\Users\xxxxx\Documents\Passwords Database 2015-01-03 22:23 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2015-01-03 22:22 - 2015-01-03 22:22 - 00000000 ____D () C:\Windows\ELAMBKUP 2015-01-03 22:21 - 2015-01-03 22:49 - 00818888 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2015-01-03 22:21 - 2015-01-03 22:49 - 00150536 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2015-01-03 22:21 - 2014-08-12 18:33 - 00246456 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys 2015-01-03 22:17 - 2015-01-03 22:17 - 00000000 __HDC () C:\ProgramData\{B18B6B47-547B-4884-B977-E30BBCB3C043} 2015-01-03 22:16 - 2015-01-03 22:16 - 00000000 __HDC () C:\ProgramData\{0FBC18ED-38E5-47CD-909E-26B2242C6C2D} 2015-01-03 22:15 - 2015-01-03 22:15 - 00000000 __HDC () C:\ProgramData\{074595B0-0A1C-4DFF-AA89-993E1954016E} 2015-01-03 22:14 - 2015-01-03 22:14 - 00000888 _____ () C:\Users\Public\Desktop\Kontakt 5.lnk 2015-01-03 22:14 - 2015-01-03 22:14 - 00000000 __HDC () C:\ProgramData\{2E9C94ED-C152-4D5D-8E21-AAE23373844C} 2015-01-03 19:50 - 2015-01-03 19:50 - 00001846 _____ () C:\Users\Public\Desktop\EZkeys-64.lnk 2015-01-03 17:50 - 2015-01-03 17:54 - 34200128 _____ (Steinberg Media Technologies GmbH) C:\Users\xxxxx\Downloads\eLicenserControlSetup(2).exe 2015-01-03 17:47 - 2012-08-10 06:26 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2015-01-03 17:09 - 2015-01-03 17:09 - 00189792 _____ (Sysinternals) C:\Windows\PSEXESVC.exe 2015-01-03 16:48 - 2014-12-24 06:23 - 00000000 ____D () C:\Users\xxxxx\Downloads\LicenseSupportInstallerWin64_v2.4.5_r27678 2015-01-03 16:41 - 2015-01-03 16:52 - 00000530 _____ () C:\Windows\DtcInstall.log 2015-01-03 16:21 - 2015-01-03 16:51 - 00002028 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk 2015-01-03 16:21 - 2015-01-03 16:51 - 00002016 _____ () C:\Users\Public\Desktop\iLok License Manager.lnk 2015-01-03 16:20 - 2015-01-03 16:51 - 00000000 ____D () C:\Program Files (x86)\iLok License Manager 2015-01-03 14:37 - 2015-01-10 22:08 - 00000000 ____D () C:\FRST 2015-01-03 14:13 - 2015-01-03 14:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-03 13:30 - 2015-01-03 13:31 - 02173952 _____ () C:\Users\xxxxx\Desktop\adwcleaner_4.106.exe 2015-01-03 12:55 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-01-03 12:55 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-13 11:43 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-13 11:43 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-13 11:40 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-13 11:40 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-13 11:40 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-13 11:40 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-13 11:40 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-13 11:40 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-13 11:40 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-13 11:40 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-13 11:40 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-13 11:40 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-13 11:40 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-13 11:40 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-13 11:40 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-13 11:40 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-13 11:40 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-13 11:40 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-13 11:40 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-13 11:40 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-13 11:40 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-13 11:40 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-13 11:40 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-13 11:40 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-13 11:40 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-13 11:40 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-13 11:40 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-13 11:40 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-13 11:40 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-13 11:40 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-13 11:40 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-13 11:40 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-13 11:40 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-13 11:40 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-13 11:40 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-13 11:40 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-13 11:40 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-13 11:40 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-13 11:40 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-13 11:40 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-13 11:40 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-13 11:40 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-13 11:40 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-13 11:40 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-13 11:40 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-13 11:40 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-13 11:40 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-13 11:40 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-13 11:40 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-13 11:40 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-13 11:40 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-13 11:40 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-13 11:40 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-13 11:40 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-13 11:40 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-13 11:40 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-13 11:36 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-13 11:36 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-13 11:36 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-13 11:34 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-13 11:34 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-13 11:34 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-13 11:34 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-13 11:34 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-13 11:34 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-13 11:34 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-13 11:34 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-13 11:34 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-13 11:34 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-13 11:34 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-13 11:34 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-13 11:34 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-10 22:06 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-10 22:06 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-10 22:04 - 2013-07-12 12:41 - 01056678 _____ () C:\Windows\WindowsUpdate.log 2015-01-10 22:01 - 2012-02-12 14:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2015-01-10 21:59 - 2013-07-12 12:37 - 00080206 _____ () C:\Windows\setupact.log 2015-01-10 21:57 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-10 21:57 - 2012-09-17 13:14 - 00078946 _____ () C:\Windows\mlkumidi.log 2015-01-10 21:57 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-10 17:55 - 2010-01-30 18:20 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Steinberg 2015-01-10 17:54 - 2014-05-29 13:36 - 00000000 ____D () C:\Users\Public\Documents\VSL Custom Data 2015-01-10 17:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2015-01-10 17:51 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\w3data.vss 2015-01-10 17:51 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\msvcsv60.dll 2015-01-10 17:51 - 2011-05-28 12:21 - 00000096 _____ () C:\ProgramData\autobk.inc 2015-01-10 17:51 - 2010-02-15 12:34 - 00000304 _____ () C:\Windows\msocreg32.dat 2015-01-10 17:51 - 2010-02-15 12:34 - 00000288 _____ () C:\Windows\SysWOW64\w3data.vss 2015-01-10 17:48 - 2012-07-29 15:38 - 00000000 ____D () C:\Users\xxxxx\AppData\Roaming\Celemony Software GmbH 2015-01-10 17:04 - 2010-01-30 19:36 - 00000000 ____D () C:\Windows\Minidump 2015-01-10 16:51 - 2012-12-08 18:07 - 00000000 ____D () C:\Program Files\Steinberg 2015-01-10 16:01 - 2010-01-27 16:29 - 00385866 _____ () C:\Windows\PFRO.log 2015-01-10 14:40 - 2010-01-25 17:07 - 00000000 ____D () C:\Program Files (x86)\Steinberg 2015-01-10 13:26 - 2012-06-07 13:31 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-10 13:26 - 2011-05-20 23:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-10 12:25 - 2014-06-21 12:00 - 00000000 ____D () C:\Users\xxxxx\AppData\Local\Adobe 2015-01-10 12:11 - 2010-01-30 18:34 - 00000049 _____ () C:\Windows\SysWOW64\SYNSOPOS.exe.cfg 2015-01-10 12:11 - 2010-01-30 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser 2015-01-10 12:11 - 2010-01-25 17:07 - 00563400 _____ () C:\Windows\DPINST.LOG 2015-01-10 11:52 - 2010-01-30 18:21 - 00000000 ____D () C:\ProgramData\Steinberg 2015-01-10 11:21 - 2009-07-14 18:58 - 11838790 _____ () C:\Windows\system32\perfh007.dat 2015-01-10 11:21 - 2009-07-14 18:58 - 03637322 _____ () C:\Windows\system32\perfc007.dat 2015-01-10 11:21 - 2009-07-14 06:13 - 00006340 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-10 11:15 - 2011-08-05 15:00 - 00000000 ____D () C:\Program Files (x86)\VstPlugIns 2015-01-04 17:16 - 2014-11-23 10:11 - 00000000 ____D () C:\AdwCleaner 2015-01-04 17:04 - 2010-01-31 13:12 - 00000000 ____D () C:\temp 2015-01-04 17:03 - 2013-12-07 13:16 - 00001995 _____ () C:\Users\Public\Desktop\Cubase 7.5 64bit.lnk 2015-01-04 16:52 - 2010-01-31 13:37 - 00000000 ____D () C:\Users\xxxxx\Documents\Native Instruments 2015-01-04 16:48 - 2010-01-31 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2015-01-04 16:48 - 2010-01-31 14:33 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2015-01-04 13:34 - 2013-08-11 13:12 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2015-01-04 13:33 - 2010-02-06 19:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-01-04 13:32 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-01-04 12:52 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2015-01-04 12:41 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2015-01-04 12:39 - 2009-07-14 03:34 - 94371840 _____ () C:\Windows\system32\config\software.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 37748736 _____ () C:\Windows\system32\config\system.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2015-01-04 12:13 - 2012-06-13 08:45 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2015-01-04 12:13 - 2012-06-12 18:24 - 00030528 _____ () C:\Windows\GVTDrv64.sys 2015-01-03 22:49 - 2014-08-13 19:34 - 00077512 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwtp.sys 2015-01-03 22:24 - 2012-09-01 13:17 - 00000000 ____D () C:\Users\xxxxx 2015-01-03 22:24 - 2012-02-12 14:02 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2015-01-03 19:51 - 2011-04-22 15:06 - 00000000 ____D () C:\Users\xxxxx\Documents\Toontrack 2015-01-03 19:51 - 2011-04-22 13:48 - 00000000 ____D () C:\ProgramData\Toontrack 2015-01-03 19:50 - 2011-10-04 14:58 - 00000000 ____D () C:\Program Files\Common Files\VST3 2015-01-03 19:50 - 2010-02-14 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Toontrack 2015-01-03 19:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-01-03 17:25 - 2010-02-15 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IK Multimedia 2015-01-03 16:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-01-03 16:23 - 2012-04-27 09:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-03 16:21 - 2010-01-27 16:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-01-03 15:57 - 2014-09-25 14:02 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-13 13:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-12-13 13:31 - 2014-04-26 12:25 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-12-13 11:47 - 2013-07-14 15:54 - 00000000 ____D () C:\Windows\system32\MRT 2014-12-13 11:47 - 2010-02-05 19:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-13 11:44 - 2010-01-25 18:22 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-12-13 11:28 - 2013-04-13 10:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk Files to move or delete: ==================== C:\Users\xxxxx\SOFTUBE PLUG-INS CONTROL.EXE ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-10 15:38 ==================== End Of Log ============================ --- --- --- |
10.01.2015, 22:35 | #25 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015 Ran by xxxxx at 2015-01-10 22:14:48 Running from C:\Users\xxxxx\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Total Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Total Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Total Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) @BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.24 - GIGABYTE) Acronis*True*Image*Home 2012 (HKLM-x32\...\{C1FDF2F0-2136-42D8-8A64-2B45BBF2C19E}Visible) (Version: 15.0.7119 - Acronis) Acronis*True*Image*Home 2012 (x32 Version: 15.0.7119 - Acronis) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.) Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) AmpegSVX (HKLM-x32\...\{CF1D7323-8A0A-49C7-83B0-088DB90721E2}) (Version: 1.1.3 - IK Multimedia) AmpliTube 3 (HKLM-x32\...\{5DD152A8-BFB3-439E-90CD-5C00C2116E23}) (Version: 3.0.0 - IK Multimedia) AmpliTube 3 version 3.14.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.14.0 - IK Multimedia) AmpliTube Fender (HKLM-x32\...\{B178BACA-880B-4D20-85F9-522F7F2DECBE}) (Version: 1.1.0 - IK Multimedia) AmpliTube Jimi Hendrix (HKLM-x32\...\{66BA35B0-1911-47EF-B170-1DCFFDA362F1}) (Version: 1.0.3 - IK Multimedia) AmpliTube2 (HKLM-x32\...\{C95AACD4-9507-4F5C-9D53-22B1ACCFECD1}) (Version: 2.1.4 - IK Multimedia) Antares Autotune VST RTAS TDM v5.08 (HKLM-x32\...\Antares Autotune VST RTAS TDM_is1) (Version: - Team AiR 2007) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ARC System 2 version 2.2.1 (HKLM\...\{4952A610-D484-4F6A-B1B4-33797CFDB821}_is1) (Version: 2.2.1 - IK Multimedia) ArcSoft Panorama Maker 6 (HKLM-x32\...\{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}) (Version: 6.0.8.85 - ArcSoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.) AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE) AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Basic FX Suite (HKLM-x32\...\InstallShield_{45BBAD53-80DB-4DD2-9C50-B5E09EFFAEA7}) (Version: 1.0.0 - Yamaha Corporation) Basic FX Suite (Version: 1.0.0 - Yamaha Corporation) Hidden Best Service Engine 1.0.4 64bit (HKLM-x32\...\Best Service Engine 1.0.4 64bit) (Version: - ) Best Service Galaxy II (HKLM-x32\...\Best Service Galaxy II) (Version: - ) Best Service Galaxy Vintage D (HKLM-x32\...\Best Service Galaxy Vintage D) (Version: - Best Service) Best Service Galaxy Vintage D (Version: 1.0.0.001 - Best Service) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Boris Continuum Complete 7 Adobe CS5 (HKLM\...\{A31D5812-F0AA-4AFA-B584-C2C4AC141518}) (Version: 7.00.0000 - Boris FX, Inc.) Canon MP110 (HKLM\...\{B3467C74-0678-459a-9180-722763E0AFDE}) (Version: - ) Canon ScanGear Starter (HKLM-x32\...\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}) (Version: - ) CS-80V2 2.5.4 (HKLM-x32\...\CS-80V2_is1) (Version: 2.5.4 - Arturia) CSR (HKLM-x32\...\{648C1BFD-6A70-46D8-B855-F84D95C2DC34}) (Version: 1.1.1 - IK Multimedia) Custom Shop version 1.5.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.5.0 - IK Multimedia) DVD-lab PRO 2.3 (HKLM-x32\...\DVD-lab PRO 2.3_is1) (Version: - Mediachance) East West Boesendorfer 290 (HKLM-x32\...\East West Boesendorfer 290) (Version: - ) East West EWQLSO Silver Edition (HKLM-x32\...\East West EWQLSO Silver Edition) (Version: - ) East West Hardcore Bass (HKLM-x32\...\East West Hardcore Bass) (Version: - ) East West Hardcore Bass XP (HKLM-x32\...\East West Hardcore Bass XP) (Version: - ) Easy Tune 6 B12.0402.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE) Easy Tune 6 B12.0402.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden Electronic EZmix pack (HKLM-x32\...\{6450F55E-EE0F-4203-A90D-D533EE3F88E4}) (Version: 1.0.0 - Toontrack) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.8.5.1159 - Steinberg Media Technologies GmbH) ELS Vocoder (HKLM-x32\...\ELS Vocoder_is1) (Version: 1.6.0 - Eiosis, Inc.) EZdrummer (HKLM-x32\...\{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}) (Version: 1.3.2 - Toontrack) EZdrummer 2 32-bit (HKLM-x32\...\{7E36EB5B-0739-4DA7-BF26-E63DD2BECA76}) (Version: 2.0.0 - Toontrack) EZdrummer 2 32-bit Update (HKLM-x32\...\{CDE1FC7E-3E9A-48BA-BBB9-65C2026CA0A2}) (Version: 2.0.1 - Toontrack) EZdrummer 2 64-bit (HKLM\...\{B9217824-0EBE-49C7-98A0-A76CC46BBB7D}) (Version: 2.0.0 - Toontrack) EZdrummer 2 64-bit Update (HKLM\...\{11CC8964-9CB0-46E6-9218-CD39ED4A554D}) (Version: 2.0.1 - Toontrack) EZDrummer 64 bit (HKLM\...\{6CEFB8E2-2B47-49AB-B97E-AA1ACF6595E5}) (Version: 1.3.0 - Toontrack) EZDrummer 64-bit (HKLM\...\{80E801DB-5288-4447-AAC2-27F329B61C6E}) (Version: 1.3.2 - Toontrack) EZkeys Classic Electrics 64 (HKLM\...\{2F547D3F-AB60-4319-8513-80DBD3896BA8}) (Version: 1.0.1 - Toontrack) EZmix 32-bit (HKLM-x32\...\{B5AB1F3A-136C-4C87-BB49-0E3ACD5B9F7C}) (Version: 2.0.9 - Toontrack) EZmix 64-bit (HKLM\...\{3D83CC9F-E2E1-47AE-B1AF-F6D3A8825196}) (Version: 2.0.9 - Toontrack) EZXAmericana (HKLM-x32\...\{7DB4839F-DFA6-49D2-907F-740CE65B2D10}) (Version: 1.0.0 - Toontrack) EZXClaustrophobic (HKLM-x32\...\{8094F7AE-CA21-4AF2-A256-BC918CE0E796}) (Version: 1.1.3 - Toontrack) EZXCocktail (HKLM-x32\...\{147567F0-8575-4BE0-B5B3-62706C67FA5A}) (Version: 1.3.0 - Toontrack) EZXFunkmasters (HKLM-x32\...\{BB5A44CB-3045-43E2-BEB0-B64E477D4633}) (Version: 1.0.0 - Toontrack) EZXJazz (HKLM-x32\...\{EED8D44F-CEBB-4298-8D0E-E01AF6AC0663}) (Version: 1.0.0 - Toontrack) EZXVintage (HKLM-x32\...\{430399DC-98BC-4A7F-8F8E-77981CABAE05}) (Version: 1.2.0 - Toontrack) FG-X Virtual Mastering Console (HKLM\...\FG-X Virtual Mastering Console_is1) (Version: - Slate Digital) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{19666E73-D9E5-44D4-8F33-037ED151ECBC}) (Version: 2.1.22.0 - MAGIX AG) FXpansion BFD3 (HKLM-x32\...\FXpansion BFD3) (Version: 3.0.3 - FXpansion Audio UK Ltd) Garritan Jazz Big Band (HKLM-x32\...\Garritan Jazz Big Band) (Version: - ) Garritan Personal Orchestra (HKLM-x32\...\Garritan Personal Orchestra) (Version: - ) Garritan Personal Orchestra KP2 (HKLM-x32\...\Garritan Personal Orchestra KP2) (Version: - ) Gigabyte Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0001 - GIGABYTE Technologies, Inc.) Groove Agent SE Rock Pop Toolbox Drums (HKLM-x32\...\{E9BFA009-DD72-4F2A-84CB-6DF46472B563}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Halls Of Fame Free - Origami Edition 2.5.2 (HKLM-x32\...\Halls Of Fame Free - Origami Edition 2.5.2) (Version: - ) High-Definition Video Playback (x32 Version: 11.1.11500.4.273 - Nero AG) Hidden IK Multimedia Authorization Manager version 1.0.11 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.11 - IK Multimedia) iLok Client Helper (HKLM-x32\...\InstallShield_{DEA491FB-48BC-4B6B-8902-FCD4BAB069BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.) iLok Client Helper (x32 Version: 5.9.1 - PACE Anti-Piracy, Inc.) Hidden iLok Client Helper x32x64 (HKLM-x32\...\InstallShield_{27F0B084-8305-4891-B9FD-4F2E3EDF98D4}) (Version: 5.8.12 - PACE Anti-Piracy) iLok Client Helper x32x64 (x32 Version: 5.8.12 - PACE Anti-Piracy) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Incomedia WebSite X5 v9 - Evolution (HKLM-x32\...\{64392EEB-38EF-45FD-822D-5C75CA136860}_is1) (Version: 9.0.0.1597 - Incomedia s.r.l.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation) Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.) iZotope Nectar Elements (HKLM-x32\...\iZotope Nectar Elements_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Mirrorball Style Pack (HKLM-x32\...\iZotope Nectar Mirrorball Style Pack_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Style Pack 1 (HKLM-x32\...\iZotope Nectar Style Pack 1_is1) (Version: 1.00 - iZotope, Inc.) iZotope Nectar Utility Pack 1 (HKLM-x32\...\iZotope Nectar Utility Pack 1_is1) (Version: 1.00 - iZotope, Inc.) iZotope Ozone 3 (HKLM-x32\...\iZotope Ozone 3_is1) (Version: 3.05 - iZotope, Inc.) iZotope Ozone 4 (HKLM-x32\...\iZotope Ozone 4_is1) (Version: 4.03 - iZotope, Inc.) iZotope Spectron (HKLM-x32\...\iZotope Spectron_is1) (Version: 1.05 - iZotope, Inc.) iZotope Stutter Edit (HKLM-x32\...\iZotope Stutter Edit_is1) (Version: 1.04 - iZotope, Inc.) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) Jazz and Big Band KP2 (HKLM-x32\...\Jazz and Big Band KP2) (Version: - ) JBridge (HKLM-x32\...\JBridge) (Version: - JBridge) <==== ATTENTION! Jupiter-8V2 2.5.5 (HKLM-x32\...\jupiter8v25_is1) (Version: 2.5.5 - Arturia) Kaspersky Total Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) Kaspersky Total Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden K-Lite Codec Pack 6.4.5 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 6.4.5 - ) K-Lite Mega Codec Pack 8.9.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.9.5 - ) KORG padKONTROL Editor Librarian (HKLM-x32\...\{D77332DD-FA53-4E49-9F4B-3863B8D56196}) (Version: 1.01.0010 - KORG Inc.) KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{B3CB5BA3-3E98-4E85-944E-B03D055F8450}) (Version: 1.13.0601 - Korg Inc.) LatencyMon 6.00 (HKLM\...\LatencyMon_is1) (Version: - Resplendence Software Projects Sp.) LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe) Magic Bullet Looks (HKLM-x32\...\InstallShield_{595AC242-897D-494C-A278-2A2781403824}) (Version: 1.4.1 - Red Giant Software) Magic Bullet Looks (Version: 1.4.1 - Red Giant Software) Hidden Magic Bullet Mojo (HKLM-x32\...\InstallShield_{40E89076-E040-421E-AEB7-D931F8B07401}) (Version: 1.2.0 - Red Giant Software) Magic Bullet Mojo (Version: 1.2.0 - Red Giant Software) Hidden MAGIX 3D Maker (embeded) (HKLM-x32\...\MAGIX 3D Maker D) (Version: 6.0.0.3 - MAGIX AG) MAGIX Foto Manager 8 6.0.1.457 (D) (HKLM-x32\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.457 - MAGIX AG) MAGIX Foto Premium 3.1.0.11 (D) (HKLM-x32\...\MAGIX Foto Premium D) (Version: 3.1.0.11 - MAGIX AG) MAGIX Fotobuch 3.6 (HKLM-x32\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG) MAGIX MP3 Maker 15 10.0.0.257 (D) (HKLM-x32\...\MAGIX MP3 Maker 15 D) (Version: 10.0.0.257 - MAGIX AG) MAGIX Online Druck Service 3.4.3.0 (D) (HKLM-x32\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG) MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG) MAGIX Website Maker 4 1.13.0.112 (D) (HKLM-x32\...\MAGIX Website Maker 4 D) (Version: 1.13.0.112 - MAGIX AG) Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net) Melodyne 3.2 (HKLM-x32\...\{A1F143D1-1F0D-44FB-A44B-71D4367D16DE}) (Version: 3.2.0202 - Celemony Software GmbH) Melodyne 3.2 (x32 Version: 3.2.0202 - Celemony Software GmbH) Hidden Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH) Melodyne singletrack (HKLM-x32\...\{16DF894D-FC3F-4B87-908D-671E201CD7A8}) (Version: 2.01.0045 - Celemony Software GmbH) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 1.0.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version: - ) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation) Mini V 2.5.5 (HKLM-x32\...\miniv2_5_is1) (Version: 2.5.5 - Arturia) minimoog V 1.6 (HKLM-x32\...\minimoog V_is1) (Version: - Arturia) minimoog V2 2.0 (HKLM-x32\...\minimoog V2_is1) (Version: - Arturia) Miroslav Philharmonik (HKLM-x32\...\{BA0D0121-A3BA-487D-9C78-7AB0E676C722}) (Version: 1.1.2 - IK Multimedia) Modular V 2.6.3 (HKLM-x32\...\MMV_2.6.0_is1) (Version: 2.6.3 - Arturia) Moog Modular V 2.5 (HKLM-x32\...\Moog Modular V 2_is1) (Version: - Arturia) Movavi Screen Capture Studio 4 (HKLM-x32\...\Movavi Screen Capture Studio 4) (Version: 4.3.3 - MOVAVI) Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) mp3-2-wav converter 1.14 (HKLM-x32\...\mp3-2-wav) (Version: - ) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MusicLab RealGuitar (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (HKLM-x32\...\{4c7ab715-e30c-4db5-ae25-da050dd80533}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealGuitar Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (HKLM-x32\...\{a55070fb-e9c5-4a41-b693-7f439a4d02cc}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealLPC Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (HKLM-x32\...\{85520ea4-3eee-4096-89b7-6df88a92032e}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealStrat Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab Virtual Midi Driver (64-bit) (HKLM\...\{2B019162-86C7-4D14-AED0-2CB5110BA4FF}) (Version: 2.0.2.0 - MusicLab, Inc.) Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 60s Drums (HKLM-x32\...\Native Instruments Abbey Road 60s Drums) (Version: - Native Instruments) Native Instruments Abbey Road 60s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 60s Drums 1.1) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drums (HKLM-x32\...\Native Instruments Abbey Road 70s Drums) (Version: - Native Instruments) Native Instruments Abbey Road 70s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 70s Drums 1.1) (Version: - Native Instruments) Native Instruments Abbey Road Modern Drums (HKLM-x32\...\Native Instruments Abbey Road Modern Drums) (Version: - Native Instruments) Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments) Native Instruments Battery 3 (HKLM-x32\...\Native Instruments Battery 3) (Version: - Native Instruments) Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments) Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.0.1.288 - Native Instruments) Native Instruments DrumMicA (HKLM-x32\...\Native Instruments DrumMicA) (Version: - Native Instruments) Native Instruments Elektrik Piano (HKLM-x32\...\Native Instruments Elektrik Piano) (Version: - ) Native Instruments Elektrik Piano 1.5 (HKLM-x32\...\Native Instruments Elektrik Piano 1.5) (Version: - ) Native Instruments Guitar Rig 3 (HKLM-x32\...\Native Instruments Guitar Rig 3) (Version: - Native Instruments) Native Instruments Guitar Rig 4 (HKLM-x32\...\Native Instruments Guitar Rig 4) (Version: - Native Instruments) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.4.2.245 - Native Instruments) Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.1.0.6 - Native Instruments) Native Instruments Replika (HKLM-x32\...\Native Instruments Replika) (Version: 1.2.0.699 - Native Instruments) Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments) Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: - Native Instruments) Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: - Native Instruments) Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments) Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: - Native Instruments) Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: - Native Instruments) Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: - Native Instruments) Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments) Nero 10 ClipartPack (HKLM-x32\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.6.10000.11.0 - Nero AG) Nero 10 Kwik Themes 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.6.10000.1.0 - Nero AG) Nero 10 Kwik Themes 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.6.10000.2.0 - Nero AG) Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.6.10000.0.0 - Nero AG) Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.6.10000.0.0 - Nero AG) Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.6.10000.1.0 - Nero AG) Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.6.10000.11.0 - Nero AG) Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.6.10000.11.0 - Nero AG) Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.10600.6.100 - Nero AG) Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10700.5.100 - Nero AG) Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.4.10400.2.100 - Nero AG) Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10600.4.100 - Nero AG) Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG) Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10800.6.100 - Nero AG) Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10300.1.100 - Nero AG) Nero Kwik Media (HKLM-x32\...\{1F7D9F37-C39C-486C-BDF8-8F440FFB3352}) (Version: 1.6.16600.75.100 - Nero AG) Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.11200 - Nero AG) Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.10.10700.5.100 - Nero AG) Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG) Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.10.10500.4.100 - Nero AG) Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10500.3.100 - Nero AG) Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.4.11000.9.100 - Nero AG) Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.10.10700.6.100 - Nero AG) NF VST 64-bit Installer (HKLM-x32\...\NF VST 64-bit Installer3.0) (Version: 3.0 - Nomad Factory) Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon) Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.7.0 - Nikon) NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation) NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9745 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation) ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE) PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) PACE License Support Win64 (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) Hidden PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.12 - Nikon) Plus Pack für Acronis True Image Home 2012 (HKLM-x32\...\{A8EFC6C1-DF0C-4F51-8779-EAC4CDB440A4}) (Version: 15.0.6131 - Acronis) Prophet-V2 2.5.3 (HKLM-x32\...\prophetv2_5_is1) (Version: 2.5.3 - Arturia) PSP VintageMeter 32bit (HKLM-x32\...\PSP VintageMeter 32bit) (Version: 1.0.0 32bit - PSPaudioware.com) PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6554 - Realtek Semiconductor Corp.) ReValver HPSE x64 (HKLM\...\ReValver HPSE x64_is1) (Version: - ) Roots Sticks MIDI (HKLM-x32\...\{0EEAD139-1ABB-43B9-BBA1-5ECF9C6CCF8B}) (Version: 1.0.0 - Toontrack) SampleMoog (HKLM-x32\...\{218AA20E-F016-4385-9F74-04FF8E596FB2}) (Version: 1.0.2 - IK Multimedia) SampleTank 2 (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.4 - IK Multimedia) SampleTank 3 version 3.3.0 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.3.0 - IK Multimedia) Sentinel Protection Installer 7.4.0 (HKLM-x32\...\{5A180ED5-0AC1-410A-B790-5E0319CD0A93}) (Version: 7.4.0 - SafeNet, Inc.) SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden Softube Plug-Ins (VST 32-bit) (HKLM-x32\...\Softube Plug-Ins (VST 32-bit)) (Version: - ) Softube Plug-Ins (VST 64-bit) (HKLM\...\Softube Plug-Ins (VST 64-bit)) (Version: - ) Softube Plug-Ins (VST AAX 64-bit) (HKLM\...\Softube Plug-Ins (VST AAX 64-bit)) (Version: - ) SONiVOX Vocalizer (HKLM-x32\...\SONiVOX Vocalizer_is1) (Version: - ) Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit)_is1) (Version: 1.0.0 - Sonnox Ltd, Oxford, UK) Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit)_is1) (Version: 1.0.2 - Sonnox Ltd, Oxford, UK) Spark Vintage Drum Machines 1.7.2 (HKLM-x32\...\Spark Vintage Drum Machines_is1) (Version: - Arturia) SPL TwinTube 1.3.1 (HKLM-x32\...\SPL TwinTube_is1) (Version: - SPL) SPL Vitalizer MK2-T 1.3 (HKLM-x32\...\SPL Vitalizer MK2-T_is1) (Version: - SPL) Splashtop Connect for Firefox (HKLM-x32\...\{EF25F71D-F3E8-42A3-8B5A-DBF83C4B942F}) (Version: 2.0.5.2 - Splashtop Inc.) Splashtop Connect for IE (HKLM-x32\...\{E2B086BD-75A9-45D1-A675-151624B259A1}) (Version: 2.0.5.1 - Splashtop Inc.) SSD Sampler (HKLM-x32\...\SSD4) (Version: 1.1 - Yellow Matter Entertainment) StartUpProject (HKLM-x32\...\{4ABFED1A-0DE9-4864-A89F-1117DECFF672}) (Version: 3.5.0 - Avid Technology, Inc.) Steinberg CC121 Extension 64bit (HKLM-x32\...\{1D111953-3C70-48E3-BB62-B669C724585C}) (Version: 1.7.1 - Yamaha Corporation) Steinberg Cubase 7.5 64bit (HKLM\...\{C75E8AD9-C89F-4505-5E87-CFCCEBE284FA}) (Version: 7.5.20 - Steinberg Media Technologies GmbH) Steinberg Cubase 8 64bit (HKLM\...\{C806BE81-01DE-4EFA-33AC-34635B3EAB4A}) (Version: 8.0.5 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH) Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.2 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.1.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Acoustic Agent (HKLM-x32\...\{F34EA13C-F078-4003-AE21-43EAB2680EC5}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.2.0 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.2 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne 64bit (HKLM\...\{743C5D75-6BC8-4881-BF7D-E7DF29F155F4}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Additional Content Set 01 (HKLM-x32\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH) Steinberg HALionOne Expression Set (HKLM-x32\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Drum Set (HKLM-x32\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Set (HKLM-x32\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Pro Set (HKLM-x32\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Drum Set (HKLM-x32\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Set (HKLM-x32\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg UR44 Applications (HKLM-x32\...\InstallShield_{37619421-E7D8-44C2-85A3-486C97E6A0D4}) (Version: 2.1.0 - Yamaha Corporation) Steinberg UR44 Applications (Version: 2.1.0 - Yamaha Corporation) Hidden Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg VST Bass Amp Content (HKLM-x32\...\{A2FC1750-B90F-4948-9D6E-DDDA155C6EC8}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg VST Classics 1 64bit (HKLM\...\{AA322103-FC2B-4D86-BA6C-67D4DDB4209C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg VST Classics 2 64bit (HKLM\...\{AC07B5F9-BF11-4221-9E85-87A6F33BCBB3}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Stutter Edit Expansion 1 (HKLM-x32\...\Stutter Edit Expansion 1_is1) (Version: 1.00 - iZotope, Inc.) Stutter Edit Expansion 2 (HKLM-x32\...\Stutter Edit Expansion 2_is1) (Version: 1.00 - iZotope, Inc.) Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - ) Superior Drummer 32-bit (HKLM-x32\...\{009AC76E-1A66-4682-82B7-417E77F3C648}) (Version: 2.4.0 - Toontrack) Superior Drummer 64-bit (HKLM\...\{22029AEE-38DF-4E35-AEF4-FE8CA3F6667F}) (Version: 2.4.0 - Toontrack) Toontrack solo (HKLM-x32\...\{5866520C-8857-4986-833A-039F4584C3F7}) (Version: 1.3.2 - Toontrack) Toontrack solo 64 bit (HKLM\...\{FA9D0D8C-FDD1-45C2-8291-079FBA72D2CB}) (Version: 1.3.2 - Toontrack) T-RackS 1.x (HKLM-x32\...\{37BCCAE2-A3AD-4E03-B4FD-A1BE1FE6365A}) (Version: 1.3.0 - IK Multimedia) T-RackS 3 Standard (HKLM-x32\...\{A78D0A87-8C6E-4726-84D7-C4CAC122617D}) (Version: 3.1.1 - IK Multimedia) T-RackS CS version 4.7.1 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.7.1 - IK Multimedia) UAD Powered Plug-Ins (HKLM-x32\...\UAD Powered Plug-Ins) (Version: - ) Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - ) Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.6 - Ulead Systems, Inc.) Ulead PhotoImpact 11 (HKLM-x32\...\{C8550C86-A712-4219-AD4C-038C9FD1D149}) (Version: 11.0 - Ulead System) UninstallTpkdx64 (HKLM\...\Tpkdx64_is1) (Version: - ) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Vienna Instruments 2.0 (HKLM\...\Vienna Instruments_is1) (Version: - Vienna Symphonic Library) Vienna Instruments Software 1.11 (HKLM-x32\...\Vienna Instruments Software_is1) (Version: - Vienna Symphonic Library) ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.7.6 - Nikon) Vir2 Instruments Acoustic Legends HD (HKLM-x32\...\Vir2 Instruments Acoustic Legends HD) (Version: - ) Vir2 Instruments BASiS (HKLM-x32\...\Vir2 Instruments BASiS) (Version: - ) Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}) (Version: 1.00.0000 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) VKFX 2.2.5 (HKLM\...\{C270463E-8DF0-45c7-AB1F-2695E822E344}_is1) (Version: 2.2.5 - Overloud) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) WAV to AC3 Encoder 5.0 (HKLM-x32\...\WAV to AC3 Encoder_is1) (Version: - Wieslaw Soltes) WaveLab 8.5 (64 bit) (HKLM\...\WaveLabPro8_5_64) (Version: 8.5.0.849 - Steinberg) Waves Complete V9r21 (HKLM-x32\...\{93000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.3.21 - Waves) Wavpack4Wavelab6 (HKLM-x32\...\{D2CB5A07-DF85-4CFD-8E76-EB23B77730F3}) (Version: 1.0.0 - RIL) Windows Driver Package - Universal Audio Inc. (UAD2Pcie) UAD2DSP (11/30/2010 ) (HKLM\...\D6464B370822574865708071F3E87D186FAC7BA4) (Version: 11/30/2010 - Universal Audio Inc.) Windows Driver Package - Universal Audio Inc. (UAD2System) UAD2DSP (11/30/2010 ) (HKLM\...\072DA3D1AC97714EA927A1A5770099D1AB131FD5) (Version: 11/30/2010 - Universal Audio Inc.) WinRAR 4.10 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH) Wurlitzer V 1.0.6 (HKLM-x32\...\Wurlitzer V_is1) (Version: - Arturia) XLN Online Installer (HKLM\...\XLN Online Installer Inno Setup ID_is1) (Version: - ) XLN Online Installer (HKLM\...\XLN Online Installer) (Version: - XLN Audio AB) Yamaha Steinberg USB Driver (HKLM-x32\...\InstallShield_{89A4C956-539C-438D-8D3B-B9C054FD0DDE}) (Version: 1.8.5 - Yamaha Corporation) Yamaha Steinberg USB Driver (Version: 1.8.5 - Yamaha Corporation) Hidden Yamaha USB-MIDI Driver (HKLM-x32\...\InstallShield_{18369253-E53F-4A47-818E-082DFB950872}) (Version: 3.1.2.1 - Yamaha Corporation) Yamaha USB-MIDI Driver (Version: 3.1.2.1 - Yamaha Corporation) Hidden yellow tools Independence Pro 2.5.4 Software Suite 64bit (HKLM-x32\...\yellow tools Independence Pro 2.5.4 Software Suite 64bit) (Version: - ) Zero-G Vocal Forge (HKLM-x32\...\Zero-G Vocal Forge) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{CE4DC330-BD45-4D58-89D8-213C0487778D}\InprocServer32 -> C:\Program Files\MusicLab\RealStrat 3\RealStratView.dll () CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{FEEC32C4-894D-4B59-B6ED-8AC7B1C84295}\InprocServer32 -> C:\Program Files\MusicLab\RealGuitar 3\RealGuitarView.dll () ==================== Restore Points ========================= 04-01-2015 16:46:45 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2015-01-04 12:41 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1061FDDF-FD38-4434-923F-B01E4FE9EA0B} - System32\Tasks\{29175965-F787-4528-B3C8-F57146EBD8E8} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {142BD87F-4E9D-4DD7-BD37-30E762B767FB} - System32\Tasks\{85839F60-C55D-4A03-ADA4-CFBFF70913F4} => pcalua.exe -a "C:\Users\xxxxx\Downloads\Waves_Complete_V9r18.exe" -d "C:\Users\xxxxx\Downloads" Task: {19ABA4F3-17E6-4F42-AB05-A96F73B41FA8} - System32\Tasks\{BB11460A-50B3-494F-9819-514E591A0F96} => pcalua.exe -a Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe -d Q:\Downloads\Tascam\FW-1082_DR_Win_v170 Task: {19FE1324-E749-4E42-AF49-7C829D936723} - System32\Tasks\{DA2C2281-7022-46CA-9B16-D35E131E183B} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {1DD7E5BB-F8FF-4979-AB40-75A0ACE435F4} - System32\Tasks\{29DBEDF4-CF87-46A4-B759-506861DE03D9} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {1E879F1F-9418-45B8-A47C-1E96C550DA07} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {23F870EA-19D1-47A4-88EA-D94C1A6C1ECF} - System32\Tasks\{4866F09B-B790-40EA-BF5E-BECC5DA41AE1} => C:\Users\xxxxx\Downloads\Waves_Complete_V9r18.exe [2014-10-08] () Task: {24235CED-6D6E-4576-8077-0B7DE26822E1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {26AEF134-8686-4622-ACE9-13CD77C4229F} - System32\Tasks\{CD71D5AF-98B4-41C1-ABF5-E88C19526654} => pcalua.exe -a Q:\Downloads\Steinberg\WaveLabAspi.exe -d Q:\Downloads\Steinberg Task: {26B0B279-DF8C-4CFE-9069-73402524C30C} - System32\Tasks\{ADB300C0-352F-4357-89B4-6DD70CC70B1B} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {298B857C-0B65-4FF1-974A-56F1C6FA985C} - System32\Tasks\{438F3EF0-DDAA-4675-A999-E7A0FD922E27} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {29948ADB-C48B-4D26-928D-AB21C21FAFE0} - System32\Tasks\{40D901C2-504F-4FFA-B15A-16A9F99DEB99} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {29FB761E-3D1C-4660-9107-8982B85C70AE} - System32\Tasks\{412B8675-D7A0-4674-AD88-F0B1B16B8122} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {2DF5DD56-FBEA-49CD-9443-9D46DEEEF944} - System32\Tasks\{D1C71F96-9AAB-4054-87C3-8673B64EA10B} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {322F7B8A-43DE-4669-8405-F9FEE4815575} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {3D5576D7-F137-456F-ACF7-4E6951BCAAAE} - System32\Tasks\{5F9DF423-7D3C-427E-81DF-1C0A3089E864} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {45D8E408-144E-40D2-9CC8-945D0CC76826} - System32\Tasks\{B7775B54-F6E5-4832-B4BE-E877DE2F3B45} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {4BAC4AD4-0AFA-4599-BF47-E4110BB1E66E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {5D8AAF0F-B35F-44DF-940F-949DD8FB752C} - System32\Tasks\{81C7480D-65DF-4F3C-ADE7-3B3D3A21A13A} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {67A2DD0A-7E44-4505-9669-67B017F40EEE} - System32\Tasks\{626B8230-16CC-48CF-A490-58CEED8E21A8} => pcalua.exe -a "C:\Users\xxxxx\Desktop\Kontakt 4 Factory Content Setup PC.exe" -d "C:\Users\xxxxx\Desktop" Task: {6B31B445-731D-4169-8747-370AC6CE856E} - System32\Tasks\{2AD3E5CD-846C-454C-8F5E-66F9BD146432} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {78468091-1F8B-4889-88B6-09283C587F7A} - System32\Tasks\{5746D425-FB45-49FB-89AC-6D718D8AAB96} => pcalua.exe -a H:\setup.exe -d H:\ Task: {7ABB794D-4402-4F4B-AAE6-A683947D3A5F} - System32\Tasks\{2CBFBC4B-2D9E-4357-AF11-0F0709DF2A74} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {83BF8E31-F091-46C7-90E7-5ABBACBBFB90} - System32\Tasks\{4898AA0A-DFAB-4D6E-90A0-A8B280D99E75} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {894932C1-A298-4A4C-BCDD-E4BA7387C27F} - System32\Tasks\AdobeAAMUpdater-1.0-xxxxx-PC-xxxxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-05-16] (Adobe Systems Incorporated) Task: {95398875-A3E3-45A8-A3A4-1F8424E8D14C} - System32\Tasks\{BFAD21FD-87DD-4D57-8435-CAF757D6A11F} => pcalua.exe -a H:\windows\german\pm\personal\Setup.exe -d H:\windows\german\pm\personal Task: {9C84F1F2-3512-4CE1-A371-B703568C1E31} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {A3B740FE-B024-42AE-8090-69BF33EA3B3A} - System32\Tasks\{5853299B-4259-442D-85A5-8CC6580067B3} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {A5428D3A-522E-4698-818D-012D47A16CB5} - System32\Tasks\{07A01D39-F62B-4A0F-A2E0-E53256F212E9} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {ABA56809-A401-4F32-874C-F1A51A3589C4} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {ABE5DB4C-EC69-4E54-A15A-A495205ACB52} - System32\Tasks\{B76EAEE9-550E-4B96-99EA-F859C946EBCA} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {ABECAB4D-8FF9-45AF-A0D9-51D2A67D355F} - System32\Tasks\{C8AE0818-88F1-4A18-A57B-B441BE68ECA4} => pcalua.exe -a "D:\Retro ADpak Installer.exe" -d D:\ Task: {B076D6CE-39BD-4472-985B-7919F96AAB82} - System32\Tasks\{7C16986C-0877-491D-ABB6-88470C77EE5B} => pcalua.exe -a "G:\Downloads\Universal Audio\UAD-Win-v580.exe" -d "G:\Downloads\Universal Audio" Task: {B4148331-B027-4713-AE36-D5E9929070D7} - System32\Tasks\{51E7D79B-2CAA-4FFC-ABD0-363FA9548361} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {BA31E6FA-43E9-4DD4-9608-A8C89C69160B} - System32\Tasks\{D1FC40E7-6029-4CC3-A406-CD8EBE42631A} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {BA347F6F-00F2-472A-AF65-19A3D1DFB2A3} - System32\Tasks\{06423D2D-E9C1-4F33-B81A-82C715621358} => pcalua.exe -a "H:\Alicias Keys Setup PC.exe" -d H:\ Task: {BC37EC53-D032-424F-A403-D85B9824E3F9} - System32\Tasks\{B04DD4E4-4CDD-43D9-8750-AF953E20A112} => pcalua.exe -a "O:\Program Files (x86)\VSL\Vienna Instruments\LibraryInstaller.exe" -d "O:\Program Files (x86)\VSL\Vienna Instruments" Task: {BD10712F-BDCC-40A6-9840-FF84C52BE6FD} - System32\Tasks\{2C46918F-A593-4956-88DE-8F999A59AE9C} => pcalua.exe -a "H:\Independence Pro 2.5.4 Software Suite 64 E-License.exe" -d H:\ Task: {BF7ABB10-6A68-409E-8008-EB534F8F8705} - System32\Tasks\{D398A544-CFB3-46E8-B5DF-626FF232C43B} => pcalua.exe -a "C:\Users\xxxxx\Downloads\install_flash_player.exe" -d "C:\Users\xxxxx\Downloads" Task: {C18139FF-A0AB-4047-8DDD-39525E452E10} - System32\Tasks\{6904D156-3764-4007-AEC4-9544A7DA37E0} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {C37AE386-CBA9-43AE-9844-B2CE7224BE33} - System32\Tasks\{1D409CDB-4184-4914-A0E6-97AD74AC8C6D} => H:\windows\german\pm\personal\Setup.exe Task: {C58B58B4-3DE9-45F0-9B11-850C7FDD27B0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-10] (Adobe Systems Incorporated) Task: {C667DE3E-8FA6-443B-9CCC-7B757AB7C2C4} - System32\Tasks\{85AF413A-1425-4DA2-BFA3-8E5B4A8E3B8B} => pcalua.exe -a "D:\Cubase 7 for Windows\Setup.exe" -d "D:\Cubase 7 for Windows" Task: {C73A72CF-5138-48BE-BF08-78546B184472} - System32\Tasks\{0BCE0B9C-45A2-40B0-9941-9F39BDACB669} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {C92F3D73-0DF8-4A42-8396-F321B5E87D9A} - System32\Tasks\{EFB4A033-2F63-4013-82D3-FEDE6E7A8D55} => C:\Windows\System32\SoftLcd1082.exe Task: {CA870B03-DCDD-48C0-98C2-D714511B21F1} - System32\Tasks\{C14BF85D-4129-4CE4-AD72-D630D327CC26} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {D0CB62B8-3961-4DED-AC91-4AE23D264B6B} - System32\Tasks\{9B31F731-5050-4586-98EF-74A01C60D886} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {D401F2A2-731E-4682-BF5A-9AC9585DE606} - System32\Tasks\{674EA2D3-4F3C-4EA3-8749-2D08682045A0} => pcalua.exe -a "C:\Users\xxxxx\Downloads\DriverSetup.exe" -d "C:\Users\xxxxx\Downloads" Task: {D57D1B7C-1831-4FAD-BF64-203A05D8D136} - System32\Tasks\{E6A7A111-7169-4964-9496-AA39C0C5D697} => pcalua.exe -a H:\Autorun.exe -d H:\ Task: {DF1EB108-2A31-441E-971D-1CD931F8A30E} - System32\Tasks\{C4C278E8-DFDC-4D88-A004-A03664E2C937} => C:\Program Files\Steinberg\Asio\asioglldsetup.exe [2010-12-06] (Steinberg Media Technologies) Task: {E2AD9959-656C-4596-9ABE-C3AB27091F0E} - System32\Tasks\{E3C7FEEC-A48E-4A6B-8D20-9CDC54920125} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {E618B9A0-0D06-45B0-BCFA-BF36790B1C72} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {E9E16472-D60C-48EA-B60E-E2548DF10B2B} - System32\Tasks\{B74E7334-75CB-455D-8C95-F754C20EBF68} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: {EB90BB02-A30C-4C16-A089-2811D2AA2EB7} - System32\Tasks\{665362E6-1AD6-479D-ABD8-BCF17AE72325} => C:\Users\xxxxx\Downloads\DriverSetup.exe Task: {F2D8BAA3-CBCA-4E56-B0D4-0E6B5B601F6E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft) Task: {FD61B29E-C3EA-4605-9193-7EF307CC5001} - System32\Tasks\{B6B539BF-11D3-4E9C-BB34-34F0B21FCC70} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_xxxxx\jBridgev1.19Setup_xxxxx.exe Task: {FF6AC220-F9ED-43A6-A526-138A6488B389} - System32\Tasks\{8F48DE62-F226-4564-A004-BC06D47FE024} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2012-06-13 00:10 - 2010-01-19 03:31 - 00072304 _____ () C:\Windows\SysWOW64\XSrvSetup.exe 2013-08-11 13:11 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-08-30 17:12 - 2014-08-30 17:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll 2012-04-27 17:33 - 2012-04-27 17:33 - 00435552 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ulxmlrpcpp.dll 2012-06-13 00:09 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2015-01-03 14:13 - 2015-01-03 14:13 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00459048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00587048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll 2014-08-30 17:12 - 2015-01-03 22:31 - 00332584 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com\nponlinebanking.dll 2012-04-27 21:21 - 2012-04-27 21:21 - 13005104 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ti_managers.dll 2012-04-27 18:09 - 2012-04-27 18:09 - 00018784 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Program Files\Common Files\System:bkJR4Q5ekubuEytkHOHN9FDldZk AlternateDataStreams: C:\ProgramData\Microsoft:0JpKqUFDcPdEORJ8qNFp8w AlternateDataStreams: C:\ProgramData\Microsoft:5hYrtYXv4RFuvoGmPrGD2NLHTREw AlternateDataStreams: C:\ProgramData\Microsoft:5KfNWpWNPX1wbFxFO3E9ImnmfLp AlternateDataStreams: C:\ProgramData\Microsoft:9kl92Sfgv9VOx5y487Gb AlternateDataStreams: C:\ProgramData\Microsoft:e6QV9RBqH5tBpkOJ825uc44 AlternateDataStreams: C:\ProgramData\Microsoft:EmZUO1ghceEFEfgohiyQTSr AlternateDataStreams: C:\ProgramData\Microsoft:FIzD2p7hRpzMsiWzLU4FWAu4DG2Y AlternateDataStreams: C:\ProgramData\Microsoft:gEDtHGZl5VBhyUDsChb AlternateDataStreams: C:\ProgramData\Microsoft:iBRVEzFW1llEoLZcS3VLEeVCW AlternateDataStreams: C:\ProgramData\Microsoft:JFbsLoAG7ylh6FO5F5B AlternateDataStreams: C:\ProgramData\Microsoft:lJgRnpcsZyHzZ9RcWOe669vqjX AlternateDataStreams: C:\ProgramData\Microsoft:mzLKEwry2nZIbRjOEIHNQyz AlternateDataStreams: C:\ProgramData\Microsoft:P2kNTjY7GAAENqAnpY AlternateDataStreams: C:\ProgramData\Microsoft:PbjOONTVgtPL20OMMjQAGQFm AlternateDataStreams: C:\ProgramData\Microsoft:pyWUynYKzFVcmjsLti7Jn2f AlternateDataStreams: C:\ProgramData\Microsoft:qpD21ezWETolKR7zxZN132 AlternateDataStreams: C:\ProgramData\Microsoft:rTbZl3fuV0KA1SBvenaKkXxQGQGGNo AlternateDataStreams: C:\ProgramData\Microsoft:u8EGYeTR5GuwkeSSaotMc8NQ1BG3Tt AlternateDataStreams: C:\ProgramData\Microsoft:V7JFxnYuTdgxFTad71b7riK9u2 AlternateDataStreams: C:\Users\xxxxx\Cookies:0HxNukw9hQPeAlOyhj AlternateDataStreams: C:\Users\xxxxx\Cookies:2sTxxI2AoieXEXStwlc AlternateDataStreams: C:\Users\xxxxx\Cookies:fqAY3vHSNIV8wb0vtZQlu58L1sO AlternateDataStreams: C:\Users\xxxxx\Cookies:maNpXg26EfLhAYLVCg5bm9NQ AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\Lokale Einstellungen:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\AppData\Local:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\AppData\Local:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\AppData\Local:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\AppData\Local:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\AppData\Local:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:9C8oVTTJe0Mg4r6XIib3b AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:9CsZiNQcryUE7kqO6ZBBdG5 AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:GGSz4VHky0otQFX6En2N1VP AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:To2ogLfHDD3i7B2vbeAdv7PjjFaB AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:WvM0t3Ek5IOBgKzW9cw7l AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Anwendungsdaten:XMujKqO45NECvrUh7LWwPD AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:EkLl8viNdpZaDt5BtyibJZWv AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:O3Gupa96puwZsDBndwL AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:SulGbcoM5k5htOkrT6oFYFHf AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:ughxnTcu7B6kj3rj AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temp:VTgSC9p3AXvhXEs6X1UKGxWVvAyMr AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:0L9d5Wklr9wAn9cdrskJuAF6 AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:fhI0qFS4NI538e7huuTv8eRfF AlternateDataStreams: C:\Users\xxxxx\AppData\Local\Temporary Internet Files:xe6TJQ53vIYg0hq1z2ARUrHBzOpe ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" MSCONFIG\startupreg: AcronisTimounterMonitor => C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: DigidesignMMERefresh => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: StartFw1082Panel => fw1082panel.exe H MSCONFIG\startupreg: STCAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe" MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe MSCONFIG\startupreg: ZyngaGamesAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" ========================= Accounts: ========================== 28D925BEF4154602B49E (S-1-5-21-25170337-1842596019-2157349911-1005 - Limited - Enabled) Administrator (S-1-5-21-25170337-1842596019-2157349911-500 - Administrator - Disabled) E14ACD8B9526477D8048 (S-1-5-21-25170337-1842596019-2157349911-1003 - Limited - Enabled) Gast (S-1-5-21-25170337-1842596019-2157349911-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-25170337-1842596019-2157349911-1008 - Limited - Enabled) xxxxx (S-1-5-21-25170337-1842596019-2157349911-1000 - Administrator - Enabled) => C:\Users\xxxxx ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/10/2015 10:06:55 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x1898 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 10:06:52 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x1530 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 10:06:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x12a0 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 04:49:46 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"2" in Zeile WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0". Definition: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (01/10/2015 04:48:39 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (01/10/2015 04:48:39 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (01/10/2015 04:48:39 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (01/10/2015 03:59:56 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x1e4c Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 03:59:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x1f54 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (01/10/2015 03:59:49 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664 Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x138c Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 System errors: ============= Error: (01/10/2015 09:58:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 09:58:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 09:58:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (01/10/2015 09:58:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/10/2015 09:58:01 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cvintdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (01/10/2015 04:49:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 04:48:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (01/10/2015 04:48:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (01/10/2015 04:48:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/10/2015 04:48:16 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cvintdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2015-01-04 12:35:45.929 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2015-01-04 12:35:45.902 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:25.747 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:25.716 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:23.173 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2010-08-05 17:18:23.157 Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Percentage of memory in use: 15% Total physical RAM: 16346.31 MB Available physical RAM: 13816.91 MB Total Pagefile: 32690.8 MB Available Pagefile: 29702.55 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: (Win7 System) (Fixed) (Total:467.64 GB) (Free:278.94 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: (Lokales Laufwerk ) (Fixed) (Total:99.82 GB) (Free:93.74 GB) NTFS Drive f: (W7 Cubase/WaveLab) (Fixed) (Total:467.64 GB) (Free:358.88 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive g: (W7 Adobe/Daten/Sonstiges) (Fixed) (Total:463.87 GB) (Free:305.82 GB) NTFS Drive i: (Plug Ins 2) (Fixed) (Total:463.87 GB) (Free:110.78 GB) NTFS Drive k: (Lokales Laufwerk) (Fixed) (Total:123.68 GB) (Free:82.99 GB) NTFS Drive o: (W7 Plug Ins) (Fixed) (Total:708.01 GB) (Free:348.29 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B0C5A5B3) Partition 1: (Active) - (Size=467.6 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1A679F39) Partition 1: (Not Active) - (Size=123.7 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=708 GB) - (Type=07 NTFS) Partition 3: (Active) - (Size=99.8 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 88618861) Partition 1: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS) Partition 2: (Active) - (Size=467.6 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Gruss |
10.01.2015, 23:04 | #26 |
/// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Sieht gut aus. Bitte ein neues Benutzerkonto mit Adminrechten anlegen. Wenn das Problem dann wieder da ist, bitte direkt das neue Konto testen. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.01.2015, 23:56 | #27 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Also ich habe jetzt soweit hoffe ich alles runtergeschmissen. Nur nach dem Neustart war DelFix und die in Uninstall benannte exe von ComboFix noch auf dem Desktop. Aber ComboFix hatte mir vorher gezeigt das es sich deiinstalliert hatte, vor dem Neustart. Was genau denkst du denn ist mit meinem Benutzerkonto ? Ich habe den PC jetzt mittlerweile wieder ein paar mal neugestartet (auch weil ich eh heute jede Menge neue Plugs und Programme draufgeschmissen habe). Aber der weisse Bildschirm kam jetzt (bis auf das eine Mal eben) nicht mehr. Und er fährt schneller hoch. Und nebenher frage ich mich als PC-Noob natürlich, was macht eigentlich KASPERSKY ? Wofür hab ich die teure Software wenn diese nicht die Maleware oder was sonst auch immer entdeckt ? Kann ich mich dann überhaupt sicher fühlen, dass Kaspersky Viren findet, wenn es nicht mal Maleware entdeckt ?? Auf jeden Fall erst nochmal DANKEEEEEEEE. Ich gebe dir sobald wie möglich Feedback, möchte aber gerne nochmal ein paar Tage damit arbeiten. Ach ja, solltet ihr/du mal einen Jingle oder ein Audio/Videobranding brauchen, einfach melden. Aber das könnt ihr wahrscheinlich eh selbst. |
11.01.2015, 08:26 | #28 |
/// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Kein AV kann dich 100% schützen, ein AV ist kein Freifahrtschein
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.01.2015, 21:10 | #29 |
| W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Hallo schrauber, nur als Info. Ich denke du kannst dieses Thema dann mal dicht machen hier. Also gestern und heute lief alles rund. Von daher hoffe ich mal es bleibt auch so. Danke dir nochmals. Gruss |
13.01.2015, 09:03 | #30 |
/// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss |
anmelden, anmeldung, anti-malware, automatisch, bildschirm, firefox, jbridge entfernen, kaspersky, keine updates, nicht mehr, plötzlich, problem, probleme, proxy server, rechner, sekunden, server, software, system, trojaner, updates, weisser bildschirm, windows |